FSX CSI Driver

EKS_CLUSTER_NAME="<CLUSTER_NAME>" AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query "Account" --output text) REGION_CODE="ap-northeast-2" EKS_NODE_GROUP_SG_ID=$(aws ec2 describe-instances --filter Name=tag:Name,Values=<NODE_INSTANCE_NAME> --query "Reservations[0].Instances[].SecurityGroups[].GroupId" --outpu text)

eksctl create iamserviceaccount \ --name fsx-csi-controller-sa \ --namespace kube-system \ --cluster $EKS_CLUSTER_NAME \ --attach-policy-arn arn:aws:iam::aws:policy/AmazonFSxFullAccess \ --approve \ --role-name AmazonEKSFSxLustreCSIDriverFullAccess \ --region $REGION_CODE

kubectl apply -k "github.com/kubernetes-sigs/aws-fsx-csi-driver/deploy/kubernetes/overlays/stable/?ref=master"

kubectl annotate serviceaccount -n kube-system fsx-csi-controller-sa \ eks.amazonaws.com/role-arn=arn:aws:iam::$AWS_ACCOUNT_ID:role/AmazonEKSFSxLustreCSIDriverFullAccess --overwrite=true

# 보안 그룹 인바운드 규칙 추가 aws ec2 authorize-security-group-ingress --group-id $CLUSTER_SG --protocol tcp --port 988 --cidr 0.0.0.0/0 --description "FSx for Lustre 파일 서버 간 Lustre 트래픽 허용" > /dev/null aws ec2 authorize-security-group-ingress --group-id $CLUSTER_SG --protocol tcp --port 1018-1023 --cidr 0.0.0.0/0 --description "FSx for Lustre 파일 서버 간 Lustre 트래픽 허용" > /dev/null # 보안 그룹 아웃바운드 규칙 추가 aws ec2 authorize-security-group-egress --group-id $CLUSTER_SG --protocol tcp --port 988 --cidr 0.0.0.0/0 --description "FSx for Lustre 파일 서버 간 Lustre 트래픽 허용" > /dev/null aws ec2 authorize-security-group-egress --group-id $CLUSTER_SG --protocol tcp --port 1018-1023 --cidr 0.0.0.0/0 --description "FSx for Lustre 파일 서버 간 Lustre 트래픽 허용" > /dev/null

curl -O https://raw.githubusercontent.com/kubernetes-sigs/aws-fsx-csi-driver/master/examples/kubernetes/dynamic_provisioning/specs/storageclass.yaml

kind: StorageClass apiVersion: storage.k8s.io/v1 metadata: name: fsx-sc provisioner: fsx.csi.aws.com parameters: subnetId: <SUBNET_ID> securityGroupIds: <SG_ID> deploymentType: PERSISTENT_1 automaticBackupRetentionDays: "1" dailyAutomaticBackupStartTime: "00:00" copyTagsToBackups: "true" perUnitStorageThroughput: "200" dataCompressionType: "NONE" weeklyMaintenanceStartTime: "7:09:00" fileSystemTypeVersion: "2.12" mountOptions: - flock

kubectl apply -f storageclass.yaml

curl -O https://raw.githubusercontent.com/kubernetes-sigs/aws-fsx-csi-driver/master/examples/kubernetes/dynamic_provisioning/specs/claim.yaml

apiVersion: v1 kind: PersistentVolumeClaim metadata: name: fsx-claim spec: accessModes: - ReadWriteMany storageClassName: fsx-sc resources: requests: storage: 1200Gi

kubectl apply -f claim.yaml

kubectl describe pvc

kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-fsx-csi-driver/master/examples/kubernetes/dynamic_provisioning/specs/pod.yaml

kubectl get pods

kubectl exec -ti fsx-app -- df -h kubectl exec -it fsx-app -- ls /data