charm-swift-storage/charmhelpers/contrib/openstack/templates
James Page 591c084532 Add support for block device encryption
Add new secrets-storage relation to vault, supporting the
use of block device encryption using dm-crypt/vaultlocker.

Prepared devices are now recorded in the local unit kv
store; this information is used to provide a list of
configured block devices to the swift-proxy charm,
rather than the previous best guess provided by
determine_block_devices.  This allows us to use the
dm-crypt device name, rather than the underlying
block device.

Encrypted block devices are unlocked on boot using
vaultlocker-decrypt systemd units (enabled by vaultlocker);
/etc/fstab entries for such devices make use of a
x-systemd.requires option to ensure that the block device
is unlocked prior to attempting to mount it.

Add new storage binding to allow charm to be used with
Juju storage.

Add new ephemeral-unmount configuration option to allow
cloud ephemeral storage to be used for testing purposes;
update functional testing to use this option.  The behaviour
of 'overwrite' was changed to accomodate the use of
encrypted block devices.

Change-Id: I9b3f8cd2de412ee96e0139dba4d4abdf998ecaf2
2018-05-08 12:52:37 +01:00
..
__init__.py Resync charmhelpers for licensing change 2016-07-06 16:44:39 +01:00
ceph.conf Make default func27-smoke xenial-pike 2017-11-16 11:32:58 +13:00
git.upstart Move charmhelpers to top-level, symlink into hooks 2015-07-17 10:58:24 +01:00
haproxy.cfg Add support for block device encryption 2018-05-08 12:52:37 +01:00
memcached.conf Remove /srv/node from updatedb 2017-01-25 09:21:31 -05:00
openstack_https_frontend Update Amulet defs, series metadata and c-h sync 2016-11-28 14:43:32 -06:00
openstack_https_frontend.conf Update Amulet defs, series metadata and c-h sync 2016-11-28 14:43:32 -06:00
section-keystone-authtoken Add hardening support 2016-03-24 11:11:58 +00:00
section-keystone-authtoken-legacy Add hardening support 2016-03-24 11:11:58 +00:00
section-keystone-authtoken-mitaka Remove /srv/node from updatedb 2017-01-25 09:21:31 -05:00
section-oslo-cache Swift storage ACLs 2017-11-07 10:24:53 -08:00
section-oslo-middleware Add support for block device encryption 2018-05-08 12:52:37 +01:00
section-oslo-notifications Add support for block device encryption 2018-05-08 12:52:37 +01:00
section-rabbitmq-oslo Move charmhelpers to top-level, symlink into hooks 2015-07-17 10:58:24 +01:00
section-zeromq Move charmhelpers to top-level, symlink into hooks 2015-07-17 10:58:24 +01:00
wsgi-openstack-api.conf Sync charm-helpers 2018-01-19 16:13:12 +02:00