在Trident后端定义中使用加密时、PVC创建失败

最后更新
另存为PDF

Views:: 15

Visibility:: Public

Votes:: 0

Category:: trident-kubernetes<a>Encryption</a><a>Trident</a><a>2009319434</a>

Specialty:: snapx

Last Updated:

适用场景

NetApp Astra Trident
NetApp ONTAP 9.x
在启用加密的情况下创建的Trident后端

问题描述

提交PVC以供创建时、如果使用已定义并启用了加密的Trident后端、则此PVC将失败并显示以下错误：

Normal ProvisioningFailed 3s (x2 over 11s) csi.trident.netapp.io encountered error(s) in creating the volume: [Failed to create volume pvc-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx on storage pool aggr1 from backend nas-backend: backend cannot satisfy create request for volume trident_pvc_yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy: (ONTAP-NAS pool aggr1/aggr1; error creating volume trident_pvc_yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy: API status: failed, Reason: Key manager is not configured on the cluster. Use the "security key-manager external enable" command to configure the external key manager or "security key-manager onboard enable" command to configure the Onboard Key Manager., Code: 13001)]