mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-12-18 02:50:30 +00:00
419ad0dd8e
- adds proposal document for PVC encryption from PR448 - adds per-volume encription by generating encryption passphrase for each volume and storing it in a KMS - adds HashiCorp Vault integration as a KMS for encryption passphrases - avoids encrypting volume second time if it was already encrypted but no file system created - avoids unnecessary checks if volume is a mapped device when encryption was not requested - prevents resizing encrypted volumes (it is not currently supported) - prevents creating snapshots from encrypted volumes to prevent attack on encryption key (security guard until re-encryption of volumes implemented) Signed-off-by: Vasyl Purchel vasyl.purchel@workday.com Signed-off-by: Andrea Baglioni andrea.baglioni@workday.com Fixes #420 Fixes #744 |
||
|---|---|---|
| .. | ||
| exec-bash.sh | ||
| logs.sh | ||
| plugin-deploy.sh | ||
| plugin-teardown.sh | ||
| pod-restore.yaml | ||
| pod.yaml | ||
| pvc-restore.yaml | ||
| pvc.yaml | ||
| raw-block-pod.yaml | ||
| raw-block-pvc.yaml | ||
| secret.yaml | ||
| snapshot.yaml | ||
| snapshotclass.yaml | ||
| storageclass.yaml | ||