Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cephfs: add support for encryption in ceph-csi-cephfs chart #4504

Merged

Conversation

NymanRobin
Copy link
Contributor

@NymanRobin NymanRobin commented Mar 18, 2024

The chart currently lacks access to configmap and secrets this causes the mounting of encrypted file systems to fail

To enable the chart to support the encrypted file systems add the following permissions:

Gives the cephfs nodeplugin clusterrole get access to configmaps and secrets.
While also adding cephfs provisioner get access to configs

Fixes issue: #4470

This still needs the kernel version 6.6 to be able to be tested, I should be able to get this tested.

@mergify mergify bot added the component/cephfs Issues related to CephFS label Mar 18, 2024
@nixpanic nixpanic added the component/deployment Helm chart, kubernetes templates and configuration Issues/PRs label Mar 18, 2024
@NymanRobin NymanRobin force-pushed the support-encryption-in-ceph-csi-cephfs-chart branch from a9e66f0 to eeae5ac Compare March 20, 2024 09:25
@nixpanic nixpanic added bug Something isn't working backport-to-release-v3.10 Label to backport from devel to release-v3.10 branch labels Mar 21, 2024
@nixpanic
Copy link
Member

@Mergifyio rebase

the chart currently lacks access to configmap and secrets
this causes the mounting of encrypted file systems to fail

Signed-off-by: NymanRobin <nyman.robin@gmail.com>
Copy link
Contributor

mergify bot commented Mar 21, 2024

rebase

✅ Branch has been successfully rebased

@nixpanic nixpanic force-pushed the support-encryption-in-ceph-csi-cephfs-chart branch from eeae5ac to 99f5101 Compare March 21, 2024 12:47
@nixpanic
Copy link
Member

@Mergifyio queue

Copy link
Contributor

mergify bot commented Mar 21, 2024

queue

✅ The pull request has been merged automatically

The pull request has been merged automatically at 5224d58

@mergify mergify bot added the ok-to-test Label to trigger E2E tests label Mar 21, 2024
@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.28

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.27

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.28

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.29

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.27

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.28

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/upgrade-tests-cephfs

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.29

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.27

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/upgrade-tests-rbd

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.29

@ceph-csi-bot ceph-csi-bot removed the ok-to-test Label to trigger E2E tests label Mar 21, 2024
@mergify mergify bot merged commit 5224d58 into ceph:devel Mar 21, 2024
34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-to-release-v3.10 Label to backport from devel to release-v3.10 branch bug Something isn't working component/cephfs Issues related to CephFS component/deployment Helm chart, kubernetes templates and configuration Issues/PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants