[openstack-dev] [Nova] FFE Request: Encrypt Cinder volumes

Benjamin, Bruce P. Bruce.Benjamin at jhuapl.edu
Fri Sep 6 20:14:15 UTC 2013


We request that volume encryption [1] be granted an exception to the feature freeze for Havana-3.  Volume encryption [2] provides a usable layer of protection to user data as it is transmitted through a network and when it is stored on disk. The main patch [2] has been under review since the end of May and had received two +2s in mid-August.  Subsequently, support was requested for booting from encrypted volumes and integrating a working key manager [3][4] as a stipulation for acceptance, and both these requests have been satisfied within the past week. The risk of disruption to deployments from this exception is minimal because the volume encryption feature is unused by default.  Note that the corresponding Cinder support for this feature has already been approved, so acceptance into Nova will keep this code from becoming abandoned.   Thank you for your consideration.

The APL Development Team

[1] https://blueprints.launchpad.net/nova/+spec/encrypt-cinder-volumes
[2] https://review.openstack.org/#/c/30976/
[3] https://review.openstack.org/#/c/45103/
[4] https://review.openstack.org/#/c/45123/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130906/1f3f933b/attachment.html>


More information about the OpenStack-dev mailing list