aws / aws/aws-parallelcluster

Option to set SharedStorageType: Efs encrypted=True

Open
#6,688 1 comment 0 reactions 0 assignees View on GitHub
3.x Backlog Feature Request
Dominant language
Python
Stars
888
Forks
314
Avg merge
1d 10h
Merged PRs (30d)
43

Description

I'm not going to paste all the config that's requested in the Issue template. If that's a problem, please let me know- it's a lot of work to gather all that config info and it's not relevant to this Issue.

We tried to enable SharedStorageType: Efs and create a new cluster, the CloudFormation fails (and rolls back).
In this case, I debugged the problem: our privileged user cannot create *unencrypted* Efs volumes, and the code to generate the CF stack looks like this:
https://github.com/aws/aws-parallelcluster/blob/develop/cli/src/pcluster/templates/cluster_stack.py#L269
```

internal_efs_storage_shared = SharedEfs(
mount_dir="/opt/parallelcluster/init_shared", name="internal_pcluster_shared", throughput_mode="elastic"
)

```

By adding "encrypted=True", I was able to create a cluster with SharedStorageType: Efs

The feature request here is to add some sort of ability to set options for the SharedStorageType: Efs including encryption, as well as the other standard Efs options. This would probably match the existing support for these options in SharedStorage EFS Settings (https://docs.aws.amazon.com/parallelcluster/latest/ug/SharedStorage-v3.html)

Contributor guide

Open the contributing guide

Research direction

Start in cli/src/pcluster/templates/cluster_stack.py around line 269, where the internal SharedEfs is created, and compare the existing SharedStorage EFS Settings documented in the linked guide. Define how SharedStorageType: Efs should expose encryption and other standard EFS options, then verify a generated CloudFormation stack can create the requested encrypted storage.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.