feedc0de/my-rook-config
1
0
Fork 0
forked from rook/rook
Code Pull Requests Activity
Files
032e6b5d775cef82151b34f2d52bb02bbdea3ae0
my-rook-config/PendingReleaseNotes.md
T
Sébastien Han ea1d71cbfb ceph: add vault kms support for osd encryption 
When the Ceph cluster runs on PVC and the OSDs are encrypted we can
store LUKS's Key Encryption Key inside a Key Management System. Today,
Rook only supports HashiCorp Vault: https://www.vaultproject.io/

The CephCluster has now a new "security" field which will plug onto the
KMS. Here is an example:

security:
  kms:
    tokenSecretName: <name of the secret containing a Vault token, used
    to authenticate>
    connectionDetails: < a map of strings containing connection
    information>

Refer to the ceph-cluster-crd documentation to lear more.

Closes: https://github.com/rook/rook/issues/6105
Signed-off-by: Sébastien Han <seb@redhat.com>
2020-10-30 16:16:33 +01:00

703 B
Raw Blame History

Major Themes

v1.5...

K8s Version Support

Upgrade Guides

Breaking Changes

Ceph

  • Ceph mons require an odd number for a healthy quorum. An even number of mons is now disallowed.
  • Update deprecated CRD apiextensions.k8s.io/v1beta1 to v1 (#6424)

Features

Ceph

  • Ceph Block Pool: add mirroring support
  • Ceph Block Pool: add replicasPerFailureDomain to set the number of replica in a failure domain (#5591)
  • Ceph Cluster: export the storage capacity of the ceph cluster (#6475)
  • Ceph Cluster: add encryption support with Key Management Service
View Git Blame Copy Permalink