diff options
| author | Marcus Watts <mwatts@redhat.com> | 2020-02-12 11:58:31 +0100 |
|---|---|---|
| committer | Marcus Watts <mwatts@redhat.com> | 2021-03-04 01:14:09 +0100 |
| commit | 480431015a11229da56b9b7c69f5f8cb863300b0 (patch) | |
| tree | e4fb5f8d8904c4657c6cf1b7f951f2730c0910de /src/common/options.cc | |
| parent | Including cmake build logic inside of libkmip. (diff) | |
| download | ceph-480431015a11229da56b9b7c69f5f8cb863300b0.tar.xz ceph-480431015a11229da56b9b7c69f5f8cb863300b0.zip | |
kmip: configuration options.
First pass at configuration configuration for kmip.
Signed-off-by: Marcus Watts <mwatts@redhat.com>
Diffstat (limited to 'src/common/options.cc')
| -rw-r--r-- | src/common/options.cc | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/src/common/options.cc b/src/common/options.cc index f2c460dfc5c..4028ee7bc66 100644 --- a/src/common/options.cc +++ b/src/common/options.cc @@ -7064,6 +7064,38 @@ std::vector<Option> get_rgw_options() { "rgw_crypt_vault_auth", "rgw_crypt_vault_addr"}), + Option("rgw_crypt_kmip_addr", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("kmip server address"), + + Option("rgw_crypt_kmip_ca_path", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("ca for kmip servers"), + + Option("rgw_crypt_kmip_username", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("when authenticating via username"), + + Option("rgw_crypt_kmip_password", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("optional w/ username"), + + Option("rgw_crypt_kmip_client_cert", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("connect using client certificate"), + + Option("rgw_crypt_kmip_client_key", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("connect using client certificate"), + + Option("rgw_crypt_kmip_kms_key_template", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("sse-kms; kmip key names"), + + Option("rgw_crypt_kmip_s3_key_template", Option::TYPE_STR, Option::LEVEL_ADVANCED) + .set_default("") + .set_description("sse-s3; kmip key names"), + Option("rgw_crypt_suppress_logs", Option::TYPE_BOOL, Option::LEVEL_ADVANCED) .set_default(true) .set_description("Suppress logs that might print client key"), |