mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-10 00:10:20 +00:00
e4b16a5c72
A tenant can place a ConfigMap in their Kubernetes Namespace with configuration options that differ from the global (by the Storage Admin set) values. The ConfigMap needs to be located in the Tenants namespace, as described in the documentation See-also: docs/design/proposals/encryption-with-vault-tokens.md Signed-off-by: Niels de Vos <ndevos@redhat.com>
13 lines
393 B
YAML
13 lines
393 B
YAML
---
|
|
# This is an optional (re)configuration of the connection to the Vault
|
|
# Service that can be created in a Kubernetes Namespace for a Tenant.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ceph-csi-kms-config
|
|
data:
|
|
vaultAddress: "http://vault.default.svc.cluster.local:8200"
|
|
vaultBackendPath: "secret/"
|
|
vaultTLSServerName: "vault.default.svc.cluster.local"
|
|
vaultCAVerify: "false"
|