cinder/releasenotes/notes/allow-encrypted-rbd-volumes-35d3536505e6309b.yaml
Eric Harney fcb45b439b RBD: Support encrypted volumes
When creating an encrypted RBD volume, initialize
LUKS on the volume using the volume's encryption key.

This is required because os-brick only handles this
step for volumes that attach via block devices.

This requires qemu-img 2.10.

Co-Authored-By: Lee Yarwood <lyarwood@redhat.com>
Related-Bug: #1463525
Implements: blueprint libvirt-qemu-native-luks
Change-Id: Id02130e9af8bdf90a712968916017d05c3213c32
2018-01-23 11:41:34 -05:00

9 lines
379 B
YAML

---
features:
- |
LUKS Encrypted RBD volumes can now be created by cinder-volume. This
capability was previously blocked by the rbd volume driver due to the lack
of any encryptors capable of attaching to an encrypted RBD volume. These
volumes can also be seeded with RAW image data from Glance through the use
of QEMU 2.10 and the qemu-img convert command.