Add paragraph about ephemeral storage encryption in Cloud Administrator Guide

[Bruce Benjamin]

The images and instances section of the cloud admin guide mentions purging of ephemeral storage without reference to the ephemeral storage encryption feature. A note needs to be added about that.

-----------------------------------
Release: 0.9 on 2015-08-31 22:34
Source: http://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/admin-guide/source/compute-images-instances.rst
URL: http://docs.openstack.org/admin-guide/compute-images-instances.html

[Ryan Selden (ryanx-seldon)]

Bruce,

What specifically needs to be added? Are encrypted ephemeral disks not purged on instance delete? I assume we are talking about the Kilo release feature - http://docs.openstack.org/security-guide/tenant-data/data-encryption.html

Thanks

[Bruce Benjamin (bruce-benjamin)]

Ryan, all ephemeral disks are purged upon instance delete, whether encrypted or not. My thought earlier was that if the purge process left any trace of data (which I have since learned is extremely unlikely), then the use of an encrypted ephemeral disk would have provided additional security if the key was deleted upon the purge. Given the suitable purge process, I don't think this bug is important now, so I think we should close it. Thanks for checking on this.

[Randy Perryman (randy-perryman)]

question should we mention that purge includes all disk types encrypted or not?

[Bruce Benjamin (bruce-benjamin)]

Yes, adding that for clarification is a good idea.

[Randy Perryman (randy-perryman)]

Okay I will take the bug and submit a patch for this.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/344897

[Randy Perryman (randy-perryman)]

Hi who should I tag to review the patch?

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/344897
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=f5f8563a6b7c631d0d94ba7d91c470159d7f5b96
Submitter: Jenkins
Branch: master

commit f5f8563a6b7c631d0d94ba7d91c470159d7f5b96
Author: Randy Perryman <email address hidden>
Date: Wed Jul 20 11:52:04 2016 -0400

    Clarifying for when an instance is deleted encrypted or not ephemeral
    storage will be purged.

    Change-Id: I868513fe56d7a58c5a53418a1990e6066bc9c86d
    Closes-Bug: 1490765

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.