mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2024-11-17 20:00:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
1f012004a6
ceph-csi/internal/kms
History
Niels de Vos 1f012004a6 util: configure tenants vaultAuthNamespace if not set 
When a tenant provides a configuration that includes the
`vaultNamespace` option, the `vaultAuthNamespace` option is still taken
from the global configuration. This is not wanted in all cases, as the
`vaultAuthNamespace` option defauls to the `vaultNamespace` option which
the tenant may want to override as well.

The following behaviour is now better defined:

1. no `vaultAuthNamespace` in the global configuration:
   A tenant can override the `vaultNamespace` option and that will also
   set the `vaultAuthNamespace` option to the same value.

2. `vaultAuthNamespace` and `vaultNamespace` in the global configuration:
   When both options are set to different values in the global
   configuration, the tenant `vaultNamespace` option will not override
   the global `vaultAuthNamespace` option. The tenant can configure
   `vaultAuthNamespace` with a different value if required.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-03-02 08:36:33 +00:00
..
aws_metadata_test.go cleanup: move KMS functionality into its own package 2021-08-30 16:31:40 +00:00
aws_metadata.go rbd: unexport aws kms structs 2022-01-28 06:55:12 +00:00
keyprotect_test.go rbd: add kms unit test for key protect server 2021-12-21 17:09:50 +00:00
keyprotect.go rbd: remove kp-metadata register functions of HPCS/Key Protect 2022-02-08 18:27:03 +00:00
kms_test.go cleanup: move KMS functionality into its own package 2021-08-30 16:31:40 +00:00
kms.go rbd: Unexport IntegratedDEK struct from kms 2022-01-28 06:55:12 +00:00
secretskms_test.go cleanup: move KMS functionality into its own package 2021-08-30 16:31:40 +00:00
secretskms.go rbd: unexport SecretsKMS from KMS implementation 2022-01-28 06:55:12 +00:00
vault_sa_test.go rbd: Unexport VaultTenantSA struct from KMS implementation 2022-01-28 06:55:12 +00:00
vault_sa.go rbd: Unexport VaultTenantSA struct from KMS implementation 2022-01-28 06:55:12 +00:00
vault_test.go cleanup: move KMS functionality into its own package 2021-08-30 16:31:40 +00:00
vault_tokens_test.go util: configure tenants vaultAuthNamespace if not set 2022-03-02 08:36:33 +00:00
vault_tokens.go util: configure tenants vaultAuthNamespace if not set 2022-03-02 08:36:33 +00:00
vault.go util: use vaultNamespace if vaultAuthNamespace is not set 2022-02-07 08:20:48 +00:00