feedc0de/my-rook-config
1
0
Fork 0
forked from rook/rook
Code Pull Requests Activity
6,202 Commits 38 Branches 289 Tags
3e32aaa693defa4140b5e568284494de0af52d82
Commit Graph
2 Commits
Author SHA1 Message Date
Jiffin Tony Thottan 968b002a6f test: validation test for RGW vault authentication 
Extending existing deploy-validate-vault.sh to include RGW as well

Signed-off-by: Jiffin Tony Thottan <thottanjiffin@gmail.com>
 2021-01-22 10:44:17 +05:30
Sébastien Han ea1d71cbfb ceph: add vault kms support for osd encryption 
When the Ceph cluster runs on PVC and the OSDs are encrypted we can
store LUKS's Key Encryption Key inside a Key Management System. Today,
Rook only supports HashiCorp Vault: https://www.vaultproject.io/

The CephCluster has now a new "security" field which will plug onto the
KMS. Here is an example:

security:
  kms:
    tokenSecretName: <name of the secret containing a Vault token, used
    to authenticate>
    connectionDetails: < a map of strings containing connection
    information>

Refer to the ceph-cluster-crd documentation to lear more.

Closes: https://github.com/rook/rook/issues/6105
Signed-off-by: Sébastien Han <seb@redhat.com>
 2020-10-30 16:16:33 +01:00