longhorn / longhorn

Cloud-Native distributed storage built on and for Kubernetes

Home Page:https://longhorn.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[UI][FEATURE] Add backing image encryption and clone support

ChanYiLin opened this issue Β· comments

Is your feature request related to a problem? Please describe (πŸ‘ if you like this request)

  • When Create Backing Image, when the Created From is clone, add following fields
    • Backing Image: the source BackingImage.
    • Encryption: 3 options for selection, ignore, encrypt and decrypt.
    • Secret: the secret name for the encryption or decryption.
    • Secret Namespace: the namespace of the secret.
  • If the BackingImage has Secret and Secret Namespace is not empty, show a "lock" icon besides it like encrypted volume.
  • When restore BackupBackingImage, user can specified the Secret and SecretNamespace for the restored BackingImage

Call APi

HTTP/1.1 POST /v1/backingimages
Host: localhost:8080
Accept: application/json
Content-Type: application/json
Content-Length: 197

{
"expectedChecksum": "",
"name": "parrot-encrypted",
"parameters": {
     "backing-image": "parrot",
     "encryption": "encrypt",
     "secret": "longhorn-crypto",
     "secret-namespace": "longhorn-system",
},
"sourceType": "clone",
}

Describe the solution you'd like

Describe alternatives you've considered

Additional context

ref: #7051

The third point is blocked by [FEATURE] Add BackupBackingImage UI. I will add Secret and SecretNamespace fields when restore lhbbi after I have done back backing image table. cc @ChanYiLin