Sébastien Han ea1d71cbfb ceph: add vault kms support for osd encryption ...

When the Ceph cluster runs on PVC and the OSDs are encrypted we can
store LUKS's Key Encryption Key inside a Key Management System. Today,
Rook only supports HashiCorp Vault: https://www.vaultproject.io/

The CephCluster has now a new "security" field which will plug onto the
KMS. Here is an example:

security:
  kms:
    tokenSecretName: <name of the secret containing a Vault token, used
    to authenticate>
    connectionDetails: < a map of strings containing connection
    information>

Refer to the ceph-cluster-crd documentation to lear more.

Closes: https://github.com/rook/rook/issues/6105
Signed-off-by: Sébastien Han <seb@redhat.com>

2020-10-30 16:16:33 +01:00

..

multi-node

Configure a cluster in the same namespace as the operator

2019-04-04 12:42:08 -06:00

deploy_admission_controller_test.sh

ceph: adds scripts and components to support admission controllers

2020-06-24 14:59:00 +05:30

deploy_admission_controller.sh

ceph: adds scripts and components to support admission controllers

2020-06-24 14:59:00 +05:30

deploy-validate-vault.sh

ceph: add vault kms support for osd encryption

2020-10-30 16:16:33 +01:00

dind-cluster-rbd

tests: Cleanup/Removed unnecessary whitespaces/new lines in scripts/docs

2018-06-24 18:39:07 +02:00

dind-cluster.sh

ci: clarify the supported vm-driver of minikube scripts

2020-10-15 20:11:31 +00:00

helm.sh

ci: remove an unnecessary code

2020-10-21 11:08:58 +00:00

k8s-vagrant-multi-node.sh

ceph: update to the latest octopus release

2020-07-06 12:11:47 -06:00

kubeadm-dind.sh

start toolbox pod with the ceph image instead of a separate image

2018-10-02 15:43:53 -06:00

kubeadm-install.sh

ci: update the default Kubernetes version

2020-09-08 15:03:05 +09:00

kubeadm.sh

ci: remove unnecessary argument of kubeadm-install

2020-09-08 15:03:05 +09:00

localPathPV.sh

ci: change local disk path

2020-08-31 22:04:46 +02:00

makeTestImages.sh

yugabytedb: integration tests and scripts

2019-08-27 22:45:14 +05:30

minikube.sh

ceph: update to the latest octopus release

2020-07-06 12:11:47 -06:00

minishift.sh

build: remove 1.8 and 1.9 and add 1.13 to integration tests

2018-12-19 23:42:01 -07:00

validate_cluster.sh

ceph: add vault kms support for osd encryption

2020-10-30 16:16:33 +01:00

validate_modified_files.sh

ceph: add vault kms support for osd encryption

2020-10-30 16:16:33 +01:00

webhook-config.yaml

ceph: implement controller-runtime for admission controllers

2020-07-14 01:10:03 +05:30

webhook-create-signed-cert.sh

ceph: adds scripts and components to support admission controllers

2020-06-24 14:59:00 +05:30

webhook-patch-ca-bundle.sh

ceph: adds scripts and components to support admission controllers

2020-06-24 14:59:00 +05:30