rbd: configure the DEKStore if the configuration suggests to use metadata

NewVolumeEncryption() will return an indication that an alternative
DEKStore needs to be configured in case the KMS does not support it.

setKMS() will also set the DEKStore if needed, so renaming it to
configureEncryption() makes things clearer.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos
2021-02-25 17:26:05 +01:00
committed by mergify[bot]
parent e4431edaf9
commit cffec0b3f3
2 changed files with 12 additions and 4 deletions

View File

@ -833,7 +833,7 @@ func genVolFromVolID(ctx context.Context, volumeID string, cr *util.Credentials,
rbdVol.Owner = imageAttributes.Owner
if imageAttributes.KmsID != "" {
err = rbdVol.setKMS(imageAttributes.KmsID, secrets)
err = rbdVol.configureEncryption(imageAttributes.KmsID, secrets)
if err != nil {
return rbdVol, err
}