metal-stack / csi-driver-lvm

MIT License
121 stars 26 forks source link

Filesystem encryption support #29

Open majst01 opened 3 years ago

majst01 commented 3 years ago

some customers may want to encrypt their data with a self provided key. The CSI spec provides interfaces for secrets per storage class and per volume: https://kubernetes-csi.github.io/docs/secrets-and-credentials-storage-class.html

With this secret, we can encrypt the filesystem with dm-crypt or cryptsetup https://wiki.archlinux.org/index.php/dm-crypt

/cc @chbmuc