ceph-csi/pkg/cephfs
Vasyl Purchel 419ad0dd8e Adds per volume encryption with Vault integration
- adds proposal document for PVC encryption from PR448
- adds per-volume encription by generating encryption passphrase
  for each volume and storing it in a KMS
- adds HashiCorp Vault integration as a KMS for encryption passphrases
- avoids encrypting volume second time if it was already encrypted but
  no file system created
- avoids unnecessary checks if volume is a mapped device when encryption
  was not requested
- prevents resizing encrypted volumes (it is not currently supported)
- prevents creating snapshots from encrypted volumes to prevent attack
  on encryption key (security guard until re-encryption of volumes
  implemented)

Signed-off-by: Vasyl Purchel vasyl.purchel@workday.com
Signed-off-by: Andrea Baglioni andrea.baglioni@workday.com

Fixes #420
Fixes #744
2020-02-05 05:18:56 +00:00
..
cephfs_util.go switch to cephfs, utils, and csicommon to new loging system 2019-08-29 14:04:31 +00:00
cephuser.go switch to cephfs, utils, and csicommon to new loging system 2019-08-29 14:04:31 +00:00
controllerserver.go CephFS: Added ENOENT checks for possible missing volumes 2020-01-29 10:05:13 +00:00
driver.go Update golangci-lint version to v1.21.0 2019-12-12 04:57:14 +00:00
errors.go CephFS: Added ENOENT checks for possible missing volumes 2020-01-29 10:05:13 +00:00
fsjournal.go Adds per volume encryption with Vault integration 2020-02-05 05:18:56 +00:00
identityserver.go Resize CephFS Volumes 2019-11-27 14:00:47 +00:00
mountcache_test.go code style 2019-04-01 23:02:19 +08:00
mountcache.go switch to cephfs, utils, and csicommon to new loging system 2019-08-29 14:04:31 +00:00
nodeserver.go Add _netdev as default mount options in plugin 2020-01-28 16:50:18 +00:00
util.go Resize CephFS Volumes 2019-11-27 14:00:47 +00:00
volume.go CephFS: Added ENOENT checks for possible missing volumes 2020-01-29 10:05:13 +00:00
volumemounter_test.go cephfs: add kernel version detection for mounting with client 2019-11-13 11:56:09 +00:00
volumemounter.go Add _netdev as default mount options in plugin 2020-01-28 16:50:18 +00:00
volumeoptions.go Adds per volume encryption with Vault integration 2020-02-05 05:18:56 +00:00