forked from rook/rook
Support using SSE-S3 encryption with RGW using vault Agent auth. RGW sends requests to the agent instead of directly to Vault, and the agent transparently injects the authentication token. This eliminates using and managing a static token Signed-off-by: Santosh <sapillai@redhat.com>
827 B
827 B
v1.20 Pending Release Notes
Breaking Changes
- The minimum supported Kubernetes version is v1.31.
Features
- RGW Account support: Added
CephObjectStoreAccountCRD for managing RGW accounts, andaccountReffield inCephObjectStoreUserto associate users with accounts. This feature is experimental and currently only supported with the Ceph main branch image (quay.ceph.io/ceph-ci/ceph:main). See the Object Store Accounts documentation for more details. - SSE-S3 with Vault Agent: Added support for server-side encryption with SSE-S3 using HashiCorp Vault Agent authentication. See the CephObjectStore Security Settings for more details.