From: Andrew Schoen Date: Mon, 22 Jan 2018 16:53:40 +0000 (-0600) Subject: docs for creating encrypted OSDs with the lvm scenario X-Git-Tag: v3.1.0beta3~40 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=21931c544cfc7a856571197704fe6a25df58a21c;p=ceph-ansible.git docs for creating encrypted OSDs with the lvm scenario Signed-off-by: Andrew Schoen --- diff --git a/docs/source/osds/scenarios.rst b/docs/source/osds/scenarios.rst index b3cd1994d..f77f5bfa4 100644 --- a/docs/source/osds/scenarios.rst +++ b/docs/source/osds/scenarios.rst @@ -176,6 +176,9 @@ mappings for devices to be deployed. It is a list of dictionaries which expects a volume name and a volume group for logical volumes, but can also accept a partition in the case of ``filestore`` for the ``journal``. +This scenario supports encrypting your OSDs by setting ``dmcrypt: True``. If set, +all OSDs defined in ``lvm_volumes`` will be encrypted. + The ``data`` key represents the logical volume name, raw device or partition that is to be used for your OSD data. The ``data_vg`` key represents the volume group name that your ``data`` logical volume resides on. This key is required for purging of OSDs @@ -231,6 +234,18 @@ For example, a configuration to use the ``lvm`` osd scenario would look like:: journal: journal-lv1 journal_vg: vg2 +For example, a configuration to use the ``lvm`` osd scenario with encryption would look like:: + + osd_objectstore: filestore + osd_scenario: lvm + dmcrypt: True + lvm_volumes: + - data: data-lv1 + data_vg: vg1 + journal: journal-lv1 + journal_vg: vg2 + crush_device_class: foo + ``bluestore`` ^^^^^^^^^^^^^