ceph / ceph/ceph-csi

rbd: enhance kmip encryption type with more auth methods

Open
#3,316 1 comment 0 reactions 0 assignees View on GitHub
enhancement keepalive
Dominant language
Go
Stars
1.6k
Forks
617
Avg merge
5d 10h
Merged PRs (30d)
43

Description

consider adding an option like `"AUTH_METHOD": "TLSCERT"` or something? That suggests making it more modular in the future. Of course, this can be the default if no `AUTH_METHOD` is set too...

_Originally posted by @nixpanic in https://github.com/ceph/ceph-csi/pull/3306#discussion_r948752673_

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the linked discussion in pull request 3306 and the current RBD KMIP encryption authentication configuration. Clarify which authentication methods should be supported, whether AUTH_METHOD should be optional with a default, and what behavior and validation would define completion.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.