Sébastien Han
ea1d71cbfb
When the Ceph cluster runs on PVC and the OSDs are encrypted we can store LUKS's Key Encryption Key inside a Key Management System. Today, Rook only supports HashiCorp Vault: https://www.vaultproject.io/ The CephCluster has now a new "security" field which will plug onto the KMS. Here is an example: security: kms: tokenSecretName: <name of the secret containing a Vault token, used to authenticate> connectionDetails: < a map of strings containing connection information> Refer to the ceph-cluster-crd documentation to lear more. Closes: https://github.com/rook/rook/issues/6105 Signed-off-by: Sébastien Han <seb@redhat.com>
24 lines
703 B
Markdown
24 lines
703 B
Markdown
# Major Themes
|
|
|
|
v1.5...
|
|
|
|
## K8s Version Support
|
|
|
|
## Upgrade Guides
|
|
|
|
## Breaking Changes
|
|
|
|
### Ceph
|
|
|
|
- Ceph mons require an odd number for a healthy quorum. An even number of mons is now disallowed.
|
|
- Update deprecated CRD apiextensions.k8s.io/v1beta1 to v1 ([#6424](https://github.com/rook/rook/pull/6424))
|
|
|
|
## Features
|
|
|
|
### Ceph
|
|
|
|
* Ceph Block Pool: add mirroring support
|
|
* Ceph Block Pool: add `replicasPerFailureDomain` to set the number of replica in a failure domain ([#5591](https://github.com/rook/rook/issues/5591))
|
|
* Ceph Cluster: export the storage capacity of the ceph cluster ([#6475](https://github.com/rook/rook/pull/6475))
|
|
* Ceph Cluster: add encryption support with Key Management Service
|