ceph-csi/internal
Niels de Vos 4937e59c4d rbd: add backwards compatible encryption in NodeStageVolume
When a volume was provisioned by an old Ceph-CSI provisioner, the
metadata of the RBD image will contain `requiresEncryption` to indicate
a passphrase needs to be created. New Ceph-CSI provisioners create the
passphrase in the CreateVolume request, and set `encryptionPrepared`
instead.

When a new node-plugin detects that `requiresEncryption` is set in the
RBD image metadata, it will fallback to the old behaviour.

In case `encryptionPrepared` is read from the RBD image metadata, the
passphrase is used to cryptsetup/format the image.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
2021-02-17 17:51:13 +00:00
..
cephfs cephfs: add subvolume path to volume context 2021-02-11 11:31:22 +00:00
controller cleanup: return error type in ReconcilePersistentVolume.getCredentials() 2020-12-09 08:35:35 +00:00
csi-common cleanup: fix mispell words 2020-11-29 12:47:46 +05:30
journal rbd: store csi.storage.k8s.io/pvc/namespace metadata as Owner 2020-12-09 13:58:48 +00:00
liveness util: replace klog with util logger in liveness.go 2020-08-19 14:38:12 +00:00
rbd rbd: add backwards compatible encryption in NodeStageVolume 2021-02-17 17:51:13 +00:00
util cleanup: remove unused MissingPassphrase error type 2021-02-17 17:51:13 +00:00