ceph-csi/examples/rbd/secret.yaml

---
apiVersion: v1
kind: Secret
metadata:
  name: csi-rbd-secret
  namespace: default
stringData:
  # Key values correspond to a user name and its key, as defined in the
  # ceph cluster. User ID should have required access to the 'pool'
  # specified in the storage class
  userID: <plaintext ID>
  userKey: <Ceph auth key corresponding to ID above>

  # Encryption passphrase
  encryptionPassphrase: test_passphrase
Fix yamllint issues Signed-off-by: Madhu Rajanna <mrajanna@redhat.com> 2019-02-07 09:59:26 +00:00			`---`
added examples 2018-07-18 14:49:15 +00:00			`apiVersion: v1`
			`kind: Secret`
			`metadata:`
			`name: csi-rbd-secret`
Fix yamllint issues Signed-off-by: Madhu Rajanna <mrajanna@redhat.com> 2019-02-07 09:59:26 +00:00			`namespace: default`
Modify RBD plugin to use a single ID and move the id and key into the secret RBD plugin needs only a single ID to manage images and operations against a pool, mentioned in the storage class. The current scheme of 2 IDs is hence not needed and removed in this commit. Further, unlike CephFS plugin, the RBD plugin splits the user id and the key into the storage class and the secret respectively. Also the parameter name for the key in the secret is noted in the storageclass making it a variant and hampers usability/comprehension. This is also fixed by moving the id and the key to the secret and not retaining the same in the storage class, like CephFS. Fixes #270 Testing done: - Basic PVC creation and mounting Signed-off-by: ShyamsundarR <srangana@redhat.com> 2019-06-01 21:26:42 +00:00			`stringData:`
			`# Key values correspond to a user name and its key, as defined in the`
			`# ceph cluster. User ID should have required access to the 'pool'`
			`# specified in the storage class`
			`userID: <plaintext ID>`
			`userKey: <Ceph auth key corresponding to ID above>`
Adds PVC encryption with LUKS Adds encryption in StorageClass as a parameter. Encryption passphrase is stored in kubernetes secrets per StorageClass. Implements rbd volume encryption relying on dm-crypt and cryptsetup using LUKS extension The change is related to proposal made earlier. This is a first part of the full feature that adds encryption with passphrase stored in secrets. Signed-off-by: Vasyl Purchel vasyl.purchel@workday.com Signed-off-by: Andrea Baglioni andrea.baglioni@workday.com Signed-off-by: Ioannis Papaioannou ioannis.papaioannou@workday.com Signed-off-by: Paul Mc Auley paul.mcauley@workday.com Signed-off-by: Sergio de Carvalho sergio.carvalho@workday.com 2019-12-13 11:41:32 +00:00
			`# Encryption passphrase`
			`encryptionPassphrase: test_passphrase`