Commit Graph

7 Commits

Author SHA1 Message Date
Corey Bryant 856dffb486 Sync charm-helpers for zed support
Change-Id: I266226c771282194f809120be0271012705cb4bd
2022-09-26 19:01:37 +00:00
Edward Hope-Morley d6dc3c794b Charmhelpers sync to get vaultlocker fixes
Also gate checking vault context completing on whether
dependencies are installed.

Change-Id: I6c89944960f592300921fbd455c6d1d8c4b9b2a2
Closes-Bug: #1849323
2019-12-11 14:30:24 +00:00
Ryan Beisner 4c21a984c6
Sync charm/ceph helpers, tox, and requirements
Change-Id: I7a2ebaa43184420812b6f348039dd37de47d2488
2019-10-02 11:49:01 -05:00
Corey Bryant 0afd2e693d Sync charm-helpers
Change-Id: I6e7b334c9b58035780b71fadd56c6d7c03dc87ec
2019-01-08 15:15:34 +00:00
James Page cfc7b05332 Resync charms.ceph and charmhelpers
Resync with latest updates to charms.ceph to avoid explicit
installation of python-ceph which is not required and breaks
under the laters Ceph packaging which no longer ships Python 2
support.

Change-Id: I4ce2b91dd476f90c30d1379dac5b00b8aaa9c73a
2018-12-05 15:24:45 +00:00
Ryan Beisner 8793ac3bae
Sync charm-helpers
Change-Id: Ic731c9213498136434bcbb1cdba8672be25e7243
2018-11-07 15:33:29 -06:00
James Page 2069e620b7 Add support for vault key management with vaultlocker
vaultlocker provides support for storage of encryption keys
for LUKS based dm-crypt device in Hashicorp Vault.

Add support for this key management approach for Ceph
Luminous or later.   Applications will block until vault
has been initialized and unsealed at which point OSD devices
will be prepared and booted into the Ceph cluster.

The dm-crypt layer is placed between the block device
parition and the top level LVM PV used to create VG's
and LV's to support OSD operation.

Vaultlocker enables a systemd unit for each encrypted
block device to perform unlocking during reboots of the
unit; ceph-volume will then detect the new VG/LV's and
boot the ceph-osd processes as required.

Note that vault/vaultlocker usage is only supported with
ceph-volume, which was introduced into the Ubuntu packages
as of the 12.2.4 point release for Luminous.  If vault is
configured as the key manager in deployments using older
versions, a hook error will be thrown with a blocked
status message to this effect.

Change-Id: I713492d1fd8d371439e96f9eae824b4fe7260e47
Depends-On: If73e7bd518a7bc60c2db08e2aa3a93dcfe79c0dd
Depends-On: https://github.com/juju/charm-helpers/pull/159
2018-05-15 08:28:15 +01:00