2020-01-29 11:44:45 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: v1
|
|
|
|
|
kind: ConfigMap
|
|
|
|
|
data:
|
|
|
|
|
config.json: |-
|
2020-02-06 16:23:14 +00:00
|
|
|
{
|
|
|
|
|
"vault-test": {
|
|
|
|
|
"encryptionKMSType": "vault",
|
2020-01-29 11:44:45 +00:00
|
|
|
"vaultAddress": "http://vault.default.svc.cluster.local:8200",
|
|
|
|
|
"vaultAuthPath": "/v1/auth/kubernetes/login",
|
|
|
|
|
"vaultRole": "csi-kubernetes",
|
|
|
|
|
"vaultPassphraseRoot": "/v1/secret",
|
|
|
|
|
"vaultPassphrasePath": "ceph-csi/",
|
2020-02-06 16:23:14 +00:00
|
|
|
"vaultCAVerify": "false"
|
2020-12-09 16:10:43 +00:00
|
|
|
},
|
|
|
|
|
"vault-tokens-test": {
|
|
|
|
|
"encryptionKMSType": "vaulttokens",
|
|
|
|
|
"vaultAddress": "http://vault.default.svc.cluster.local:8200",
|
|
|
|
|
"vaultBackendPath": "secret/",
|
|
|
|
|
"vaultTLSServerName": "vault.default.svc.cluster.local",
|
|
|
|
|
"vaultCAVerify": "false",
|
|
|
|
|
"tenantConfigName": "ceph-csi-kms-config",
|
|
|
|
|
"tenantTokenName": "ceph-csi-kms-token",
|
|
|
|
|
"tenants": {
|
|
|
|
|
"my-app": {
|
|
|
|
|
"vaultAddress": "https://vault.example.com",
|
|
|
|
|
"vaultCAVerify": "true"
|
|
|
|
|
},
|
|
|
|
|
"an-other-app": {
|
|
|
|
|
"tenantTokenName": "storage-encryption-token"
|
|
|
|
|
}
|
|
|
|
|
}
|
2021-03-04 09:23:53 +00:00
|
|
|
},
|
|
|
|
|
"secrets-metadata-test": {
|
|
|
|
|
"encryptionKMSType": "metadata"
|
2021-07-05 08:28:33 +00:00
|
|
|
},
|
|
|
|
|
"user-ns-secrets-metadata-test": {
|
|
|
|
|
"encryptionKMSType": "metadata",
|
|
|
|
|
"secretName": "storage-encryption-secret",
|
|
|
|
|
"secretNamespace": "default"
|
|
|
|
|
},
|
|
|
|
|
"user-secrets-metadata-test": {
|
|
|
|
|
"encryptionKMSType": "metadata",
|
|
|
|
|
"secretName": "storage-encryption-secret"
|
2021-03-04 09:23:53 +00:00
|
|
|
}
|
2020-02-06 16:23:14 +00:00
|
|
|
}
|
2020-01-29 11:44:45 +00:00
|
|
|
metadata:
|
|
|
|
|
name: ceph-csi-encryption-kms-config
|
