SovereignCloudStack / issues

This repository is used for issues that are cross-repository or not bound to a specific repository.
https://github.com/orgs/SovereignCloudStack/projects/6
2 stars 1 forks source link

Add encryption support the k8s OpenStack `cinder-csi-plugin` #519

Open NotTheEvilOne opened 9 months ago

NotTheEvilOne commented 9 months ago

As a SCS Operator, I want to use OpenStack the cinder-csi-plugin with encrypted volumes so that I can use encryption at rest for sensitive data. Enhancements documented at #514 are required to add this support.

Definition of Ready:

Acceptance criteria:

Definition of Done:

NotTheEvilOne commented 9 months ago

Working with the actual code revealed missing support to predefine a user selected key for encryption. First basic implementation will focus on a encrypted parameter basically implementing validation and cleanup for the expected volume encryption therefore.

NotTheEvilOne commented 9 months ago

PR for the basic implementation is created https://github.com/kubernetes/cloud-provider-openstack/pull/2525

NotTheEvilOne commented 8 months ago

Blueprint and Spec for the "bring your own keys".