Lien privé vers le CSI driver about osc-bsu-csi-driver HOT 7 CLOSED

Hi @jordanyoumbinumspot,

You will have to create a VPC Endpoint / Net Access Point, test it and configure CSI to use it.

We are preparing a more detailed response to show you how to do this.

from osc-bsu-csi-driver.

Hello @jordanyoumbinumspot ,

After testing in our dev cluster, you just need to create a VPC Endpoint in the public Subnet and the CSI will be able to make calls to the API without going through an Internet Gateway.

Best regards,
Vincent

from osc-bsu-csi-driver.

Hello,

Please when do you think we can have the detailed documentation about this implementation ?

Sincerely,
Jordan

from osc-bsu-csi-driver.

Hi

Steps are pretty straightforward:

1. I suppose you don't have any Internet Gateway left (at least no route to it)
2. Create a net access point with netId the id of your vpc, routeTableId the routeTable associated with your public subnet.
3. You request to Outscale API should now be routed through the net access point. Nothing left to do.

from osc-bsu-csi-driver.

hello jerome

it is not working for us.

here is our context:
we have 2 private subnets (not connected to internet gateway) and 2 public subnets connected to internet gateway.

we want to connect to the CSI driver only from the private subnets. so we don't understand your second step (routeTableId the routeTable associated with your public subnet).

Please can you provide us a solution that works for us ?

Sincerely,
Jordan

from osc-bsu-csi-driver.

Hi,

You first need to have a working VPC Endpoint.

You can try connecting through ssh on the node running the CSI and test your VPC Endpoint using curl > v7.75:

export OSC_REGION=eu-west-2
export OSC_ACCESS_KEY=YYY
export OSC_SECRET_KEY=ZZZ
curl https://api.$OSC_REGION.outscale.com/api/v1/ReadVolumes --user $OSC_ACCESS_KEY:$OSC_SECRET_KEY --aws-sigv4 'osc' --header 'Content-Type: application/json' --data '{}' 

Once this command is working properly, we will be able to study any CSI-related issue here.

For issues regarding VPC Endpoint itself, you would need to contact Outscale's support team or your Technical Account Manager as it is out of the scope of this project and would require much more details to share which may stay private.

from osc-bsu-csi-driver.

it is working. thank you

from osc-bsu-csi-driver.