5 Commits

Include renames

Author	SHA1	Message	Date
parth-gr	33bf21ba69	ceph: update CSR from v1beta1 to v1 ... This commit update the certificates.k8s.io to use version v1 Updated to v1 as v1beta1 certificates.k8s.io is deprecated in v1.19+ Closes: https://github.com/rook/rook/issues/8308 Signed-off-by: parth-gr <paarora@redhat.com>	2021-08-12 20:27:05 +05:30
Sébastien Han	99e00dea1e	ceph: auto detect vault k/v version ... Rook will now auto detect the kv version of the vault server. This allows users not having to pass the VAULT_BACKEND configuration in the CephCluster CR. Signed-off-by: Sébastien Han <seb@redhat.com>	2021-07-29 10:16:31 +02:00
Jiffin Tony Thottan	3cacd8db32	test: add seperate test for rgw vault integration ... RGW supports only v2 version of kv engine, current integration test is written for kv v1, hence seperating existing test into two. Signed-off-by: Jiffin Tony Thottan <thottanjiffin@gmail.com>	2021-04-28 14:40:08 +05:30
Jiffin Tony Thottan	968b002a6f	test: validation test for RGW vault authentication ... Extending existing deploy-validate-vault.sh to include RGW as well Signed-off-by: Jiffin Tony Thottan <thottanjiffin@gmail.com>	2021-01-22 10:44:17 +05:30
Sébastien Han	ea1d71cbfb	ceph: add vault kms support for osd encryption ... When the Ceph cluster runs on PVC and the OSDs are encrypted we can store LUKS's Key Encryption Key inside a Key Management System. Today, Rook only supports HashiCorp Vault: https://www.vaultproject.io/ The CephCluster has now a new "security" field which will plug onto the KMS. Here is an example: security: kms: tokenSecretName: <name of the secret containing a Vault token, used to authenticate> connectionDetails: < a map of strings containing connection information> Refer to the ceph-cluster-crd documentation to lear more. Closes: https://github.com/rook/rook/issues/6105 Signed-off-by: Sébastien Han <seb@redhat.com>	2020-10-30 16:16:33 +01:00