Managing Storage Backends Using kubectl on Huawei

Creating a Storage Backend

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

You have obtained the management IP address, username, and password of the storage device.
You have obtained configuration information such as the storage pool name and storage protocol. For details about the configuration items, see section Configuring the Storage Backend .

Procedure

Prepare the secret configuration file, for example, backend-secret.yaml. For details about the fields in the secret configuration file, see Table 1 .

apiVersion: v1
kind: Secret
metadata:
 name: backend-demo
 namespace: huawei-csi
type: Opaque
stringData:
 user: "admin"
 password: "******"
 authenticationMode: "0"

Create a secret.

Querying a Storage Backend

Mon, 01 Jan 0001 00:00:00 +0000

Querying StorageBackendClaim

Run the following command to query all storage backend claims in the default namespace:
```
kubectl get sbc -n huawei-csi
```
The following is an example of the command output:
```
NAME STORAGEBACKENDCONTENTNAME STATUS AGE
backend-demo content-xxxxxxxxxxxx Bound 53d
```
Run the following command to view storage backend claims in YAML format:
```
kubectl get sbc backend-demo -n huawei-csi -o yaml
```

Querying StorageBackendContent

Run the following command to query all storage backend instances:

Updating Storage Backend Authentication Information

Mon, 01 Jan 0001 00:00:00 +0000

To prevent the storage backend from becoming temporarily unavailable when the existing secret is modified directly, you are advised to update the authentication information by creating a new secret, replacing the reference to the existing secret, and then deleting the old secret.

Procedure

Prepare a new secret configuration file, for example, backend-secret-new.yaml.

apiVersion: v1
kind: Secret
metadata:
 name: backend-demo-new
 namespace: huawei-csi
type: Opaque
stringData:
 user: "admin"
 password: "******"
 authenticationMode: "0"

Create a secret.

Managing Storage Backend Certificates

Mon, 01 Jan 0001 00:00:00 +0000

CSI allows you to add a storage certificate to use the TLS/SSL protocol to encrypt data transmission channels, improving the security of communication with storage devices.

Adding a Storage Certificate

Create a certificate. Take OceanStor Dorado as an example. For details about how to create a certificate, click here .

Run the following command to create a secret from the certificate file:

kubectl create secret generic cert-1 --from-file=tls.crt=/path/to/cert.crt -n huawei-csi

Run the following command to update the StorageBackendClaim, enable the certificate, and specify the certificate secret. The format of the certSecret field is <namespace>/<secret-name>.

Deleting a Storage Backend

Mon, 01 Jan 0001 00:00:00 +0000

Do not delete a storage backend when a volume management operation is being performed on it.

Delete the StorageBackendClaim.
```
kubectl delete sbc backend-demo -n huawei-csi
```
After the StorageBackendClaim is deleted, the controller automatically deletes the associated StorageBackendContent.
Check whether StorageBackendContent is deleted.
```
kubectl get sbct
```
If the associated StorageBackendContent is no longer listed, the deletion is successful.
Run the following commands to manually delete the associated ConfigMap and secret: