mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-22 14:20:19 +00:00
doc: add example for csi-kms-connection-details ConfigMap
Updates: #1793 Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
parent
78cb7af46f
commit
e1f8b1d44a
39
examples/kms/vault/csi-kms-connection-details.yaml
Normal file
39
examples/kms/vault/csi-kms-connection-details.yaml
Normal file
@ -0,0 +1,39 @@
|
||||
#
|
||||
# csi-kms-connection-details is an alternative option to configure KMS
|
||||
# providers for encrypted volume support.
|
||||
# This ConfigMap can be located in the Kubernetes Namespace where Ceph-CSI is
|
||||
# deployed. In case the ceph-csi-encryption-kms-config which provides a
|
||||
# `config.json` is not mapped into the csi-rbdplugin container, the
|
||||
# csi-kms-connection-details ConfigMap will be used instead.
|
||||
#
|
||||
# The configuration values follow the common key/value contents. The key for
|
||||
# each KMS provider should be used as the value for `encryptionKMSID` in the
|
||||
# StorageClass.
|
||||
#
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
data:
|
||||
vault-test: |-
|
||||
{
|
||||
"encryptionKMSType": "vault",
|
||||
"vaultAddress": "http://vault.default.svc.cluster.local:8200",
|
||||
"vaultAuthPath": "/v1/auth/kubernetes/login",
|
||||
"vaultRole": "csi-kubernetes",
|
||||
"vaultPassphraseRoot": "/v1/secret",
|
||||
"vaultPassphrasePath": "ceph-csi/",
|
||||
"vaultCAVerify": "false"
|
||||
}
|
||||
vault-tokens-test: |-
|
||||
{
|
||||
"KMS_PROVIDER": "vaulttokens",
|
||||
"VAULT_ADDR": "http://vault.default.svc.cluster.local:8200",
|
||||
"VAULT_BACKEND_PATH": "secret",
|
||||
"VAULT_SKIP_VERIFY": "true"
|
||||
}
|
||||
secrets-metadata-test: |-
|
||||
{
|
||||
"encryptionKMSType": "metadata"
|
||||
}
|
||||
metadata:
|
||||
name: csi-kms-connection-details
|
Loading…
Reference in New Issue
Block a user