]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
GPFS volume encryption-at-rest support
authorSasikanth <sasikanth.eda@in.ibm.com>
Thu, 25 Jun 2015 10:32:29 +0000 (16:02 +0530)
committerGaurang Tapase <gaurang.tapase@in.ibm.com>
Thu, 13 Aug 2015 10:42:31 +0000 (06:42 -0400)
commit45b9bf616158588360d5bab34360e94a734a72fd
tree4e8d3ae6e47b01dc8a4c4a4008bef937358c6896
parent742026723c6bc5024b35317a87f9faf8d4f8fabc
GPFS volume encryption-at-rest support

This patch extends the capability of gpfs driver to support volume encryption
at rest using GPFS Native Encryption feature (https://ibm.biz/BdXPBm).

This includes:
1. Verification of configured gpfs backend to support encryption at rest.
2. Driver exposes gpfs_encryption_rest capability via volume type convention.

Usage - Cloud admin creates a volume type "encrypted" with extra-specs
  gpfs_encryption_rest=True
Every volume created using type "encrypted", the volumes will be encrypted
at rest.

DocImpact

Needs an update in gpfs driver documentation, as this patch introduces
encrypted backend support.

Change-Id: I83949ca51668834ecbce52e90527cf06f95bd001
Implements: blueprint gpfs-volume-encryption-rest
cinder/tests/unit/test_gpfs.py
cinder/volume/drivers/ibm/gpfs.py