Vasyl Purchel 419ad0dd8e Adds per volume encryption with Vault integration ... - adds proposal document for PVC encryption from PR448 - adds per-volume encription by generating encryption passphrase for each volume and storing it in a KMS - adds HashiCorp Vault integration as a KMS for encryption passphrases - avoids encrypting volume second time if it was already encrypted but no file system created - avoids unnecessary checks if volume is a mapped device when encryption was not requested - prevents resizing encrypted volumes (it is not currently supported) - prevents creating snapshots from encrypted volumes to prevent attack on encryption key (security guard until re-encryption of volumes implemented) Signed-off-by: Vasyl Purchel vasyl.purchel@workday.com Signed-off-by: Andrea Baglioni andrea.baglioni@workday.com Fixes #420 Fixes #744		2020-02-05 05:18:56 +00:00
..
controllerserver.go	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
driver.go	Update to kube v1.17	2020-01-17 12:06:02 +00:00
errors.go	Update Unstage transaction to undo steps done in Stage	2019-08-13 14:07:52 +00:00
identityserver.go	Resize RBD CSI volumes on demand of CO resize request	2019-12-13 12:40:12 +00:00
nodeserver.go	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
rbd_attach.go	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
rbd_journal.go	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00
rbd_util.go	Adds per volume encryption with Vault integration	2020-02-05 05:18:56 +00:00