Accessing the Netapp

1. The NetApp management endpoint is accessible by SSH from plat-gitlab.cc.vt.edu. You can find the IP addresses to SSH to under NetApp SVM Management LIFs in the On-Prem Architecture doc.
2. The credentials are in ES Vault:
   • NFS for DVLP and PPRD clusters
   • NFS for PROD clusters
   • S3 for all clusters
   • Read only API User Credentials - PROD PPRD DVLP
3. After logging into plat-gitlab.cc.vt.edu with ssh, log into the desired NetApp management interface with this command:

   ssh vsadmin@<IP address>
   

S3 administration

Show all buckets

object-store-server bucket show

Show details about a specific bucket

object-store-server bucket show -bucket <bucket name>

Create a new bucket

1. Create bucket

   vserver object-store-server bucket create -bucket <bucket name> -size 100GB
   

2. Create a user

   object-store-server user create -user <user name>
   

3. Create bucket policy for a user

   vserver object-store-server bucket policy add-statement -bucket <bucket name> -principal <user name> -effect allow -action GetObject,PutObject,DeleteObject,ListBucket,GetBucketLocation,GetBucketVersioning,ListBucketVersions,GetBucketPolicy,GetLifecycleConfiguration
   

Read Only API User

Change Password

Due to delegated controls, vsadmin cannot change this user's password and this user does not have ssh access to change their own password.

From plat-gitlab.cc.vt.edu:

curl -su ro-api:<current password> -X POST "http://plat-s3.cc.vt.edu/api/security/authentication/password" -H "Content-Type: application/json" -d '{"name":"ro-api", "password":"<updated password>"}'

Update this shared credential in the three environments.