Setting up Hashicorp Vault for Encryption with Ceph
Is there a how-to document available on how to setup Hashicorp's Vault for Ceph, preferably in a HA state? Due to some encryption needs, we need to set up LUKS, OSD encryption AND Ceph bucket encryption as well. Yes, we know there will be a performance hit, but the encrypt-everything is a hard requirement for our business needs since we have government and healthcare-related contracts. -- Michael This message and its attachments are from Data Dimensions and are intended only for the use of the individual or entity to which it is addressed, and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately and permanently delete the original email and destroy any copies or printouts of this email as well as any attachments.
On 15-04-2024 16:43, Michael Worsham wrote:
Is there a how-to document available on how to setup Hashicorp's Vault for Ceph, preferably in a HA state?
See [1] on how to do this on kubernetes. AFAIK there is no documentation / integration on using Vault with Cephadm / packages.
Due to some encryption needs, we need to set up LUKS, OSD encryption AND Ceph bucket encryption as well. Yes, we know there will be a performance hit, but the encrypt-everything is a hard requirement for our business needs since we have government and healthcare-related contracts.
You might want to use secure mode for communication between clients / daemons as well [2]. Gr. Stefan [1]: https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/key-... [2]: https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/key-...
participants (2)
-
Michael Worsham
-
Stefan Kooman