Vasyl Purchel 419ad0dd8e Adds per volume encryption with Vault integration ... - adds proposal document for PVC encryption from PR448 - adds per-volume encription by generating encryption passphrase for each volume and storing it in a KMS - adds HashiCorp Vault integration as a KMS for encryption passphrases - avoids encrypting volume second time if it was already encrypted but no file system created - avoids unnecessary checks if volume is a mapped device when encryption was not requested - prevents resizing encrypted volumes (it is not currently supported) - prevents creating snapshots from encrypted volumes to prevent attack on encryption key (security guard until re-encryption of volumes implemented) Signed-off-by: Vasyl Purchel vasyl.purchel@workday.com Signed-off-by: Andrea Baglioni andrea.baglioni@workday.com Fixes #420 Fixes #744		2020-02-05 05:18:56 +00:00
..
design/proposals	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
ceph-csi-upgrade.md	refact: Remove Kubernetes 1.13.x support	2020-01-20 10:32:30 +00:00
coding.md	Update coding.md	2019-06-04 11:50:52 +05:30
deploy-cephfs.md	Added PodSecurityPolicy support	2020-01-22 08:19:42 +00:00
deploy-rbd.md	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
development-guide.md	Add mergify rule to auto merge backported PR	2019-09-27 16:11:33 +05:30
expand-pvc.md	Doc for cephfs expand PVC	2020-01-17 13:45:20 +00:00
metrics.md	implement grpc metrics for ceph-csi	2019-08-30 06:50:32 +00:00
releases.md	Update docs.	2019-05-08 06:01:48 +00:00