ivampiresp/longhorn
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

example: Update comments of encrypto storageclasses for online expansion

Browse Source 
Longhorn 1674

Signed-off-by: Shuo Wu <shuo.wu@suse.com>
This commit is contained in:
Shuo Wu 2022-12-12 21:41:45 +08:00 committed by David Ko
parent 4f35fda4b2
commit aa3998ee3a
3 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
examples/crypto/storageclass-crypto-global.yaml
View File

@ -18,6 +18,12 @@ parameters:
csi.storage.k8s.io/node-publish-secret-namespace: "longhorn-system"
csi.storage.k8s.io/node-stage-secret-name: "longhorn-crypto"
csi.storage.k8s.io/node-stage-secret-namespace: "longhorn-system"
# These two are for online expansion of encrypto volumes.
# But you need to enable the CSINodeExpandSecret feature gate for
# the kube-apiserver and kubelet. For more details, see:
# https://kubernetes.io/blog/2022/09/21/kubernetes-1-25-use-secrets-while-expanding-csi-volumes-on-node-alpha/
# csi.storage.k8s.io/node-expand-secret-name: "longhorn-crypto"
# csi.storage.k8s.io/node-expand-secret-namespace: "longhorn-system"
# we only need crypto keys for node operations, I left these as examples
# in case we implement external key vaults in the future
# csi.storage.k8s.io/controller-publish-secret-name: "longhorn-crypto"

6
examples/crypto/storageclass-crypto-per-volume-dedicated-namespace.yaml
View File

@ -18,6 +18,12 @@ parameters:
csi.storage.k8s.io/node-publish-secret-namespace: "longhorn-system"
csi.storage.k8s.io/node-stage-secret-name: ${pvc.name}
csi.storage.k8s.io/node-stage-secret-namespace: "longhorn-system"
# These two are for online expansion of encrypto volumes.
# But you need to enable the CSINodeExpandSecret feature gate for
# the kube-apiserver and kubelet. For more details, see:
# https://kubernetes.io/blog/2022/09/21/kubernetes-1-25-use-secrets-while-expanding-csi-volumes-on-node-alpha/
# csi.storage.k8s.io/node-expand-secret-name: ${pvc.name}
# csi.storage.k8s.io/node-expand-secret-namespace: "longhorn-system"
# we only need crypto keys for node operations, I left these as examples
# in case we implement external key vaults in the future
# csi.storage.k8s.io/controller-publish-secret-name: ${pvc.name}

6
examples/crypto/storageclass-crypto-per-volume.yaml
View File

@ -18,6 +18,12 @@ parameters:
csi.storage.k8s.io/node-publish-secret-namespace: ${pvc.namespace}
csi.storage.k8s.io/node-stage-secret-name: ${pvc.name}
csi.storage.k8s.io/node-stage-secret-namespace: ${pvc.namespace}
# These two are for online expansion of encrypto volumes.
# But you need to enable the CSINodeExpandSecret feature gate for
# the kube-apiserver and kubelet. For more details, see:
# https://kubernetes.io/blog/2022/09/21/kubernetes-1-25-use-secrets-while-expanding-csi-volumes-on-node-alpha/
# csi.storage.k8s.io/node-expand-secret-name: ${pvc.name}
# csi.storage.k8s.io/node-expand-secret-namespace: ${pvc.namespace}
# we only need crypto keys for node operations, I left these as examples
# in case we implement external key vaults in the future
# csi.storage.k8s.io/controller-publish-secret-name: ${pvc.name}