openstack-ansible-galera_se.../releasenotes/notes/add-encryption-support-79e8218926995864.yaml
Sebastian Gumprich e91c8be449 add support for encryption
Closes-Bug: #1921861

Change-Id: I73e548ac208a96ddaa687a1b5fbb22cac20037d0
2021-04-20 06:42:28 +00:00

16 lines
702 B
YAML

---
features:
- |
Add support for encryption of databases. This is disabled by default and
can be enabled by setting ``galera_mariadb_encryption_enabled`` to ``true``.
For now only the ``file_key_management`` encryption plugin is supported.
You can override enryption options with ``galera_encryption_overrides``.
The role creates ``galera_db_encryption_keys`` for you, if they're not specified.
To specify your on encryption keys, provide them like this.
.. code-block:: yaml
galera_db_encryption_keys: |
1;5bbc03648be8db3d2087815717eabdec9fbc310f2b7fd53705b36fbdc80333e3
2;5bbc03648be8db3d2087815717eabdec9fbc310f2b7fd53705b36ebdc80333e3