Description of problem:
Customers are requesting bring your own key encryption on Azure to secure their disks at rest. This feature is already supported in other cloud offerings and we need to include this feature to arrive at parity.
Version-Release number of selected component (if applicable):
4.4, 4.5, 4.6
Steps to Reproduce:
This does not work on the current release.
The cloud provider code upstream supports this feature.
I have created a small pull request that enables this feature. The pull request can be found here: https://github.com/openshift/cluster-api-provider-azure/pull/158
This will have to merge into 4.7.0 now and be backported to 4.6.z/4.5.z
This won't pass QA right now. Before we can get this past QA we need to update the Azure dependency within the MAO repository. This will allow the webhooks in the cluster to understand the new fields that were added in the attached PR.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.