Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "osd: support encrypted OSD on partiton" #13169

Merged

Conversation

satoru-takeuchi
Copy link
Member

This reverts commit 0931259.

Once we introduced encrypted OSD on partition in #12924. However, even though encryptedDevice field is true, an non-encrypted OSD is created. To prevent the creation of misconfigured OSD, it's better to revert #12924 for now.

Initially, I intended to correct this problem. However, I found it will take a long time because we need to change the KMS-related code, init containers of both OSD pod and OSD prepare pod.

Checklist:

  • Commit Message Formatting: Commit titles and messages follow guidelines in the developer guide.
  • Reviewed the developer guide on Submitting a Pull Request
  • Pending release notes updated with breaking and/or notable changes for the next minor release.
  • Documentation has been updated, if necessary.
  • Unit tests have been added, if necessary.
  • Integration tests have been added, if necessary.

This reverts commit 0931259.

Once we introduced encrypted OSD on partition in rook#12924.
However, even though `encryptedDevice` field is `true`,
an non-encrypted OSD is created. To prevent the creation
of misconfigured OSD, it's better to revert rook#12924 for now.

Initially, I intended to correct this problem. However, I found
it will take long time because we need to change the KMS-related
code, init containers of both OSD pod and OSD prepare pod.

Signed-off-by: Satoru Takeuchi <satoru.takeuchi@gmail.com>
@satoru-takeuchi
Copy link
Member Author

NOTE:
I judged #12924 was OK by mistake because the OSD creation succeeded and I neglected to check whether the new OSD is encrypted. I will be careful next time.

@satoru-takeuchi
Copy link
Member Author

Although objectstore test and csi-hostname-disable fails consistently. These failures are under investigation and this PR apparently does not affect these tests.

@satoru-takeuchi satoru-takeuchi merged commit 77db655 into rook:master Nov 8, 2023
49 of 51 checks passed
travisn added a commit that referenced this pull request Nov 10, 2023
Revert "osd: support encrypted OSD on partiton" (backport #13169)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants