CSM Installer

Note: The CSM Installer only supports installation of CSM 1.0 Modules and CSI Drivers in environments that do not have any existing deployments of CSM or CSI Drivers. The CSM Installer does not support the upgrade of existing CSM or CSI Driver deployments.

The CSM (Container Storage Modules) Installer simplifies the deployment and management of Dell Container Storage Modules and CSI Drivers to provide persistent storage for your containerized workloads.

CSM Installer Supported Modules and Dell CSI Drivers

The CSM Installer must first be deployed in a Kubernetes environment using Helm. After which, the CSM Installer can be used through the following interfaces:

• CSM CLI
• REST API

How to Deploy the Container Storage Modules Installer

1. Add the dell helm repository:

helm repo add dell https://dell.github.io/helm-charts

If securing the API service and database, following steps 2 to 4 to generate the certificates, or skip to step 5 to deploy without certificates

2. Generate self-signed certificates using the following commands:

mkdir api-certs

openssl req \
    -newkey rsa:4096 -nodes -sha256 -keyout api-certs/ca.key \
    -x509 -days 365 -out api-certs/ca.crt -subj '/'

openssl req \
    -newkey rsa:4096 -nodes -sha256 -keyout api-certs/cert.key \
    -out api-certs/cert.csr -subj '/'

openssl x509 -req -days 365 -in api-certs/cert.csr -CA api-certs/ca.crt \
    -CAkey api-certs/ca.key -CAcreateserial -out api-certs/cert.crt

3. If required, download the cockroach binary used to generate certificates for the cockroach-db:

curl https://binaries.cockroachdb.com/cockroach-v21.1.8.linux-amd64.tgz | tar -xz && sudo cp -i cockroach-v21.1.8.linux-amd64/cockroach /usr/local/bin/

4. Generate the certificates required for the cockroach-db service:

mkdir db-certs

cockroach cert create-ca --certs-dir=db-certs --ca-key=db-certs/ca.key

cockroach cert create-node cockroachdb-0.cockroachdb.csm-installer.svc.cluster.local cockroachdb-public cockroachdb-0.cockroachdb --certs-dir=db-certs/ --ca-key=db-certs/ca.key

In case multiple instances of cockroachdb are required add all nodes names while creating nodes on the certificates

cockroach cert create-node cockroachdb-0.cockroachdb.csm-installer.svc.cluster.local cockroachdb-1.cockroachdb.csm-installer.svc.cluster.local cockroachdb-2.cockroachdb.csm-installer.svc.cluster.local cockroachdb-public cockroachdb-0.cockroachdb cockroachdb-1.cockroachdb cockroachdb-2.cockroachdb --certs-dir=db-certs/ --ca-key=db-certs/ca.key

cockroach cert create-client root --certs-dir=db-certs/ --ca-key=db-certs/ca.key

cockroach cert list --certs-dir=db-certs/

5. Create a values.yaml file that contains JWT, Cipher key, and Admin username and password of CSM Installer that are required by the installer during helm installation. See the Configuration section for other values that can be set during helm installation.

Note: jwtKey will be used as a shared secret in HMAC algorithm for generating jwt token, cipherKey will be used as a symmetric key in AES cipher for encryption of storage system credentials. Those parameters are arbitrary, and you can set them to whatever you like. Just ensure that cipherKey is exactly 32 characters long.

# string of any length 
jwtKey:

# string of exactly 32 characters
cipherKey: ""

# Admin username of CSM Installer
adminUserName:

# Admin password of CSM Installer
adminPassword:

6. Follow step a if certificates are being used or step b if certificates are not being used:

a) Install the helm chart, specifying the certificates generated in the previous steps:

helm install -n csm-installer --create-namespace \
   --set-file serviceCertificate=api-certs/cert.crt \
   --set-file servicePrivateKey=api-certs/cert.key \
   --set-file databaseCertificate=db-certs/node.crt \
   --set-file databasePrivateKey=db-certs/node.key \
   --set-file dbClientCertificate=db-certs/client.root.crt \
   --set-file dbClientPrivateKey=db-certs/client.root.key \
   --set-file caCrt=db-certs/ca.crt \
   -f values.yaml \
   csm-installer dell/csm-installer 

b) If not deploying with certificates, execute the following command:

helm install -n csm-installer --create-namespace \
   --set-string scheme=http \
   --set-string dbSSLEnabled="false" \
   -f values.yaml \
   csm-installer dell/csm-installer 

Note: In an OpenShift environment, the cockroachdb StatefulSet will run privileged pods so that it can mount the Persistent Volume used for storage. Follow the documentation for your OpenShift version to enable privileged pods.

Configuration

How to Upgrade the Container Storage Modules Installer

When a new version of the CSM Installer helm chart is available, the following steps can be used to upgrade to the latest version.

Note: Upgrading the CSM Installer does not upgrade the Dell CSI Drivers or modules that were previously deployed with the installer. The CSM Installer does not support upgrading of the Dell CSI Drivers or modules. The Dell CSI Drivers and modules must be deleted and re-deployed using the latest CSM Installer in order to get the most recent version of the Dell CSI Driver and modules.

1. Update the helm repository.

helm repo update

2. Follow step a if certificates were used during the initial installation of the helm chart or step b if certificates were not used:

a) Upgrade the helm chart, specifying the certificates used during initial installation:

helm upgrade -n csm-installer \
   --set-file serviceCertificate=api-certs/cert.crt \
   --set-file servicePrivateKey=api-certs/cert.key \
   --set-file databaseCertificate=db-certs/node.crt \
   --set-file databasePrivateKey=db-certs/node.key \
   --set-file dbClientCertificate=db-certs/client.root.crt \
   --set-file dbClientPrivateKey=db-certs/client.root.key \
   --set-file caCrt=db-certs/ca.crt \
   -f values.yaml \
   csm-installer dell/csm-installer

b) If not deploying with certificates, execute the following command:

helm upgrade -n csm-installer \
   --set-string scheme=http \
   --set-string dbSSLEnabled="false" \
   -f values.yaml \
   csm-installer dell/csm-installer

How to Uninstall the Container Storage Modules Installer

1. Delete the Helm chart

helm delete -n csm-installer csm-installer