Loading...

XML

Word

Printable

Type: Feature
Resolution: Done
Priority: Major
Fix Version/s: openshift-4.14
Affects Version/s: None
Component/s: API & Datastore
Labels:
- api

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Parent Link:
OCPSTRAT-28Secure the Platform
Hierarchy Progress Bar:

50% To Do, 0% In Progress, 50% Done
Target Version:

openshift-4.14

RICE Score:
0
Risk Score:
0

Discussion Needed:

Program Call

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

PX Technical Impact:
PX Impact Range:
PX Scheduling Request:
PX Review Complete:

Intelligence Requested:
Market:

Feature Overview

The work for ~~OCPBU-81~~ uncovered the need to work improving the current encryption library and test suite

Goals (aka. expected user outcomes)

Improve current encryption library/test
Increase test coverage
Add scalability tests

Questions to Answer (Optional):

hard rotation vs soft rotation?
should the etcd operator allows a customer to schedule a hard rotation?
do we need weekly rotation if we have the above?
what other optimizations should we consider?

is related to

OCPSTRAT-319 Explore options for hitless automatic defrag of etcd

Backlog

relates to

OCPSTRAT-547 Improve Key Handling and Encryption for Kube API Server

Closed

split to

OCPSTRAT-1344 [API] Support soft-rotation of ETCD datastore encryption

Backlog

Assignee:: William Caban

Reporter:: William Caban

QA Contact:: Wei Sun

Doc Contact:: Matthew Werner

Architect:: David Eads

Product Experience Engineering Contact:: Eric Rich

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2023/03/16 9:20 PM

Updated:: 2024/04/25 4:39 PM

Resolved:: 2024/02/22 4:30 AM