Availability of StorageOS Enhanced Kubernetes Storage Platform V.2.4

StorageOS, Inc. announces the availability of version 2.4 of its persistent container storage platform, delivering enhancements, anticipating market trends and enabling users to conform with requirements emerging in the cloud native persistent storage ecosystem.

Click to enlarge

Key features of the V2.4 include the provision of ‘Encryption at Rest’, a capability designed for organizations that are dependent on encrypted data as a requirement for Kubernetes workloads using persistent storage. This includes users of Kubernetes as a cloud managed service and those with data compliance regulations, such as the Payment Card Industry standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA).

When using encryption with this solution, encryption and decryption keys are under the control and management of the consumer as Kubernetes Secrets. The use of a native Kubernetes construct for key secret management provides the benefit of native Kubernetes integration with KMS providers such as HashiCorp Vault, providing further compliance and regulation as desired.

“These platform enhancements serve as important differentiators between StorageOS and other persistent storage services offered by cloud providers,” said Alex Chircop, founder and CEO. “They also demonstrate our commitment to innovation and have been designed as a result of close collaboration between our engineering team, customers and partners to ensure we are meeting the needs of both existing and potential users.“

Click to enlarge

In addition, the company delivers ‘Rapid Application Recovery’ via enhanced fencing awareness, bringing an improvement of up to 500% for failover and recovery. When deploying a stateful application within the recommended Kubernetes StatefulSet controller, a failed pod has a default eviction timeout of 5mn, allowing up to 5mns of downtime to pass before recovery is actioned.

Rapid Application Recovery allows the firm’ solution to utilise its background node awareness to intervene and where applicable, allow pods to be scheduled on different nodes with full access to their required persistent storage. This feature improves recovery time and allows a StatefulSet time to recover within 30-60s.

The V2.4 also provides ‘Intelligent Thin Provisioning’ with the addition of Trim support, allowing the OS to inform the software that data is no longer in use and can be wiped internally. The Dataplane can detect Trim/Unmap events and can transparently recover storage pool capacity at the point of deletion, therefore freeing storage from a ‘Thinly provisioned pool’ without manual intervention.

This feature is important for environments that frequently delete or move files and assists the overall availability of storage as a shared resource.

Resource:
Blog: StorageOS – Kubernetes Encryption at Rest