Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RBD fscrypt support #3310

Merged
merged 35 commits into from
Oct 17, 2022
Merged

RBD fscrypt support #3310

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
33fffa3
util: Make encryption passphrase size a parameter
irq0 Feb 11, 2022
20081ca
util: Add util to fetch encryption type from vol options
Jul 13, 2022
9b0cdf4
kms: Add GetSecret() to metadata KMS
Mar 11, 2022
7f083c2
kms: testing: add KMS test dummy registry
Aug 17, 2022
2f57e5e
kms: Add basic GetSecret() test
Apr 29, 2022
0551c0b
rbd: Rename encryption to blockEncryption prep for fscrypt
May 27, 2022
8827105
journal: Store encryptionType in Config struct
Jul 20, 2022
259b4d0
fscrypt: fscrypt integration
Aug 12, 2022
ea13d57
vendor: vendor fscrypt integration dependencies
Jun 23, 2022
13073f0
fscrypt: Unlock: Fetch keys early
Jul 19, 2022
3d9cd65
fscrypt: Fetch passphrase when keyFn is invoked not created
Jul 19, 2022
e165c9e
fscrypt: Determine best supported fscrypt policy on node init
Aug 12, 2022
1d781fd
fscrypt: Update mount info before create context
Aug 2, 2022
bfd397d
fscrypt: Use constant protector name
Aug 9, 2022
c63133e
fscrypt: fsync encrypted dir after setting policy [workaround]
Aug 12, 2022
802d766
fscrypt: fix metadata directory permissions
Sep 7, 2022
65c8787
rbd: fscrypt file encryption support
May 27, 2022
d8e94c3
rbd: Handle encryption type default at a more meaningful place
Aug 4, 2022
8e49c77
rbd: Document new encryptionType storage class example
Jul 7, 2022
ca3fabe
rbd: Add volume journal encryption support
Aug 12, 2022
2bb1f66
rbd: support file encrypted snapshots
Aug 4, 2022
a6c459d
rbd: Add context to fscrypt errors
Sep 6, 2022
92ba6c2
e2e: Add fscrypt on rbd helper
Jul 7, 2022
a5a17fd
e2e: Add helper to run encryption tests on block and file
Jul 13, 2022
d27f137
e2e: Add PVC validator to ByFileAndBlockEncryption
Aug 4, 2022
656af96
e2e: Run encryption related tests on file and block type
Jul 13, 2022
d94e75e
e2e: Add encrypted PVC with default settings test
Aug 17, 2022
b179a13
e2e: Apply formatting to rbd suite and helper
Aug 24, 2022
e4c561b
e2e: Use utilEncryptionType instead of string in rbd suite
Aug 31, 2022
7fa6046
kms: Add GetSecret() to KMIP KMS
Aug 18, 2022
829414c
scripts: Add env to set minikube iso url
Aug 26, 2022
12bd495
util: Add EncryptionTypeNone and unit tests
Sep 6, 2022
8a23075
rbd: Use EncryptionTypeNone
Sep 6, 2022
1dff9a6
cephfs: Add placeholder journal fscrypt support
Jul 20, 2022
eccb1a7
e2e: Feature flag RBD fscrypt tests (default disabled)
Oct 14, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions e2e/e2e_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@ func init() {
flag.BoolVar(&deployNFS, "deploy-nfs", false, "deploy nfs csi driver")
flag.BoolVar(&testCephFS, "test-cephfs", true, "test cephFS csi driver")
flag.BoolVar(&testRBD, "test-rbd", true, "test rbd csi driver")
flag.BoolVar(&testRBDFSCrypt, "test-rbd-fscrypt", false, "test rbd csi driver fscrypt support")
flag.BoolVar(&testNBD, "test-nbd", false, "test rbd csi driver with rbd-nbd mounter")
flag.BoolVar(&testNFS, "test-nfs", false, "test nfs csi driver")
flag.BoolVar(&helmTest, "helm-test", false, "tests running on deployment via helm")
Expand Down
Loading