2069e620b7
vaultlocker provides support for storage of encryption keys for LUKS based dm-crypt device in Hashicorp Vault. Add support for this key management approach for Ceph Luminous or later. Applications will block until vault has been initialized and unsealed at which point OSD devices will be prepared and booted into the Ceph cluster. The dm-crypt layer is placed between the block device parition and the top level LVM PV used to create VG's and LV's to support OSD operation. Vaultlocker enables a systemd unit for each encrypted block device to perform unlocking during reboots of the unit; ceph-volume will then detect the new VG/LV's and boot the ceph-osd processes as required. Note that vault/vaultlocker usage is only supported with ceph-volume, which was introduced into the Ubuntu packages as of the 12.2.4 point release for Luminous. If vault is configured as the key manager in deployments using older versions, a hook error will be thrown with a blocked status message to this effect. Change-Id: I713492d1fd8d371439e96f9eae824b4fe7260e47 Depends-On: If73e7bd518a7bc60c2db08e2aa3a93dcfe79c0dd Depends-On: https://github.com/juju/charm-helpers/pull/159 |
||
|---|---|---|
| .. | ||
| ceph.conf | ||
| hdparm.conf | ||
| vaultlocker.conf.j2 | ||