mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2024-09-20 07:29:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
b866bd491c
ceph-csi/internal/util
History
Niels de Vos b866bd491c util: add vaultAuthNamespace option for Vault KMS 
The new `vaultAuthNamespace` configuration parameter can be set to the
Vault Namespace where the authentication is setup in the service. Some
Hashicorp Vault deployments use sub-namespaces for their users/tenants,
with a 'root' namespace where the authentication is configured. This
requires passing of different Vault namespaces for different operations.

Example:
 - the Kubernetes Auth mechanism is configured for in the Vault
   Namespace called 'devops'
 - a user/tenant has a sub-namespace called 'devops/website' where the
   encryption passphrases can be placed in the key-value store

The configuration for this, then looks like:

    vaultAuthNamespace: devops
    vaultNamespace: devops/homepage

Note that Vault Namespaces are a feature of the Hashicorp Vault
Enterprise product, and not part of the Open Source version. This
prevents adding e2e tests that validate the Vault Namespace
configuration.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
(cherry picked from commit f2d5c2e0df)
2021-08-05 06:44:23 +00:00
..
aws_metadata_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
aws_metadata.go cleanup: resolve godot linter 2021-07-13 06:50:03 +00:00
cephcmds.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
cephconf.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
conn_pool_test.go cleanup: modifies the error caused due to merged PRs 2021-07-22 18:15:48 +00:00
conn_pool.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
connection.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
credentials.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
crypto_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
crypto.go util: add helper functions for resize of encrypted volume 2021-07-23 10:00:23 +00:00
cryptsetup.go rbd: add support to expand encrypted volume 2021-07-23 10:00:23 +00:00
csiconfig_test.go cleanup: resolves gofumpt issues of internal codes 2021-07-14 19:50:56 +00:00
csiconfig.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
errors_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
errors.go cleanup: fix mispell words 2020-11-29 12:47:46 +05:30
httpserver.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
idlocker_test.go util: remove deleteLock test as it is enforced by the controller 2021-07-22 15:07:49 +00:00
idlocker.go util: remove the deleteLock acquistion check for clone and snapshot 2021-07-22 15:07:49 +00:00
k8s.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
kms_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
kms.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
log.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
pidlimit_test.go cleanup: resolves gofumpt issues of internal codes 2021-07-14 19:50:56 +00:00
pidlimit.go util: getCgroupPidsFile produces striped path when extra : present 2021-08-04 07:11:26 +00:00
secretskms_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
secretskms.go cleanup: modifies the error caused due to merged PRs 2021-07-22 18:15:48 +00:00
stripsecrets.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
topology_test.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
topology.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
util_test.go cleanup: resolves gofumpt issues of internal codes 2021-07-14 19:50:56 +00:00
util.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
validate.go cleanup: resolve nlreturn linter issues 2021-07-22 06:05:01 +00:00
vault_sa_test.go cleanup: modifies the error caused due to merged PRs 2021-07-22 18:15:48 +00:00
vault_sa.go util: make parseTenantConfig() usable for modular KMSs 2021-07-13 17:16:35 +00:00
vault_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
vault_tokens_test.go util: add vaultAuthNamespace option for Vault KMS 2021-08-05 06:44:23 +00:00
vault_tokens.go util: add vaultAuthNamespace option for Vault KMS 2021-08-05 06:44:23 +00:00
vault.go util: add vaultAuthNamespace option for Vault KMS 2021-08-05 06:44:23 +00:00
volid_test.go cleanup: addresses paralleltest linter 2021-06-25 11:55:12 +00:00
volid.go cleanup: resolves gofumpt issues of internal codes 2021-07-14 19:50:56 +00:00