ceph-csi/examples/kms/vault/kp-credentials.yaml

---
# This is an example Kubernetes Secret that can be created in the Kubernetes
# Namespace where Ceph-CSI is deployed. The contents of this Secret will be
# used to connect to the Key Protect KMS.
apiVersion: v1
kind: Secret
metadata:
  name: ceph-csi-kp-credentials
stringData:
  KP_SERVICE_API_KEY: "UhMN3Jko1pCpDPpFV65N8dYANBv5vF97QuNHqXVHmKa0"
  KP_CUSTOMER_ROOT_KEY: "c7a9aa91-5cb5-48da-a821-e85c27b99d92"
  KP_SESSION_TOKEN: ""
  KP_CRK_ARN: ""
rbd: Implement Key Protect KMS integration for Ceph CSI This commit adds the support for HPCS/Key Protect IBM KMS service to Ceph CSI service. EncryptDEK() and DecryptDEK() of RBD volumes are done with the help of key protect KMS server by wrapping and unwrapping the DEK and by using the DEKStoreMetadata. Signed-off-by: Humble Chirammal <hchiramm@redhat.com> 2021-12-20 05:49:54 +00:00			`---`
			`# This is an example Kubernetes Secret that can be created in the Kubernetes`
			`# Namespace where Ceph-CSI is deployed. The contents of this Secret will be`
			`# used to connect to the Key Protect KMS.`
			`apiVersion: v1`
			`kind: Secret`
			`metadata:`
			`name: ceph-csi-kp-credentials`
			`stringData:`
			`KP_SERVICE_API_KEY: "UhMN3Jko1pCpDPpFV65N8dYANBv5vF97QuNHqXVHmKa0"`
			`KP_CUSTOMER_ROOT_KEY: "c7a9aa91-5cb5-48da-a821-e85c27b99d92"`
			`KP_SESSION_TOKEN: ""`
			`KP_CRK_ARN: ""`