From 9cd8a15c5d6bea72a4ce2768b98e916c65798bcc Mon Sep 17 00:00:00 2001 From: Marcel Lauhoff Date: Thu, 7 Jul 2022 18:31:38 +0200 Subject: [PATCH] rbd: Document new encryptionType storage class example Signed-off-by: Marcel Lauhoff --- examples/rbd/storageclass.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/examples/rbd/storageclass.yaml b/examples/rbd/storageclass.yaml index a30114667..7270b642b 100644 --- a/examples/rbd/storageclass.yaml +++ b/examples/rbd/storageclass.yaml @@ -108,6 +108,14 @@ parameters: # A string is expected here, i.e. "true", not true. # encrypted: "true" + # (optional) Select the encryption type when encrypted: "true" above. + # Valid values are: + # "file": Enable file encryption on the mounted filesystem + # "block": Encrypt RBD block device + # When unspecified assume type "block". "file" and "block" are + # mutally exclusive. + # encryptionType: "block" + # (optional) Use external key management system for encryption passphrases by # specifying a unique ID matching KMS ConfigMap. The ID is only used for # correlation to configmap entry.