Hi @Jono_A,

Can you confirm you have created the RBAC rules with kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml ?

The snapshotter is a common component for every CSI snapshot-controller. You need only one for your cluster therefore, I wouldn't put it in vxflexos namespace.

If you want to change the namespace for another namespace like kube-system, you will have to edit the two files under: https://github.com/kubernetes-csi/external-snapshotter/tree/v4.0.0/deploy/kubernetes/snapshot-controller 

FYI in Openshift, that common snapshotter is installed under the namespace: openshift-cluster-storage-operator.

Let us know if that solves the issue.

Hi Flo_csl,

Yep, can confirm that RBAC rules has been created:

[jono@K8s-Master-171 ~]$ kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml Error from server (AlreadyExists): error when creating "https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml": serviceaccounts "snapshot-controller" already exists Error from server (AlreadyExists): error when creating "https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml": clusterroles.rbac.authorization.k8s.io "snapshot-controller-runner" already exists Error from server (AlreadyExists): error when creating "https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml": clusterrolebindings.rbac.authorization.k8s.io "snapshot-controller-role" already exists Error from server (AlreadyExists): error when creating "https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml": roles.rbac.authorization.k8s.io "snapshot-controller-leaderelection" already exists Error from server (AlreadyExists): error when creating "https://raw.githubusercontent.com/kubernetes-csi/external-snapshotter/v4.0.0/deploy/kubernetes/snapshot-controller/rbac-snapshot-controller.yaml": rolebindings.rbac.authorization.k8s.io "snapshot-controller-leaderelection" already exists

However, I ran kubectl logs vxflexos-controller-66bcc75977-455bd -n vxflexos driver and found this error:

time="2021-04-07T09:07:07Z" level=fatal msg="grpc failed" error="rpc error: code = FailedPrecondition desc = All arrays are not working. Could not proceed further: map[PowerFlex-SantaClara:rpc error: code = FailedPrecondition desc = unable to login to VxFlexOS Gateway: Unauthorized]"

but i can confirm that the username and password is correct in my config.json file.

Anything else i should look for?

ok solved the issue...in the config.json i had to change the end point to 'https' instead of 'http'...

btw, i did start from scratch again hence why i'm getting a different error now.