forked from rook/rook
Ceph supported encrypted OSD in the following two ways. - Encrypt OSD by Ceph itself - Encrypt OSD by user However, Rook supports only the first way. Let's support this way too. With supporting this way, Rook can use variety of encryption methods. For example, TPM can be used to manage encrypt key. In fact, I use TPM as follows. https://github.com/cybozu-go/sabakan/blob/57ff3ab560acb99d23aa8901c1018bf865f9ff4d/docs/disk_encryption.md#disk-encryption Signed-off-by: UMEZAWA Takeshi <takeshi-umezawa@cybozu.co.jp> Signed-off-by: morimoto-cybozu <kenji_morimoto@cybozu.co.jp> Signed-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>