b6f9b24b30
Small corrections and example for auto-encryption ( #6982 )
6 years ago
13cb814a0e
update KMS README.md to set approle env ( #6978 )
6 years ago
d264d2c899
add auto-encryption feature ( #6523 )
...
This commit adds an auto-encryption feature which allows
the Minio operator to ensure that uploaded objects are
always encrypted.
This change adds the `autoEncryption` configuration option
as part of the KMS conifguration and the ENV. variable
`MINIO_SSE_AUTO_ENCRYPTION:{on,off}`.
It also updates the KMS documentation according to the
changes.
Fixes #6502
6 years ago
48cb0ea34b
Update yaml files to latest version RELEASE.2018-12-13T02-04-19Z
6 years ago
21d8c0fd13
refactor vault configuration and add master-key KMS ( #6488 )
...
This refactors the vault configuration by moving the
vault-related environment variables to `environment.go`
(Other ENV should follow in the future to have a central
place for adding / handling ENV instead of magic constants
and handling across different files)
Further this commit adds master-key SSE-S3 support.
The operator can specify a SSE-S3 master key using
`MINIO_SSE_MASTER_KEY` which will be used as master key
to derive and encrypt per-object keys for SSE-S3
requests.
This commit is also a pre-condition for SSE-S3
auto-encyption support.
Fixes #6329
6 years ago
b9b353db4b
Add env to support synchronous ops for all calls ( #6877 )
6 years ago
313ba74b09
Update to Minio GCS Gateway ( #6887 )
6 years ago
78a0fd951e
Update yaml files to latest version RELEASE.2018-12-06T01-27-43Z
6 years ago
950b4ad9af
Update to How to secure access to Minio server with TLS ( #6845 )
6 years ago
5549a44566
rename vault namespace env variable to be more idiomatic ( #6905 )
...
This commit renames the env variable for vault namespaces
such that it begins with `MINIO_SSE_`. This is the prefix
for all Minio SSE related env. variables (like KMS).
6 years ago
e7af31c2ff
Removed `clientID` from NATS-Streaming Config ( #6391 )
...
clientID must be a unique `UUID` for each connections. Now, the
server generates it, rather considering the config.
Removing it as it is non-beneficial right now.
Fixes #6364
6 years ago
e7971b1d55
Update yaml files to latest version RELEASE.2018-11-30T03-56-59Z
6 years ago
6a8ccc5925
update README.md ( #6893 )
6 years ago
b50a245208
Update to Minio Multi-Tenant Deployment Guide ( #6871 )
...
Initial edits.
6 years ago
45bb11e020
Set namespace on vault client if VAULT_NAMESPACE env is set ( #6867 )
6 years ago
b65cf281fd
Update azure.md ( #6834 )
6 years ago
f781548b0c
fix typo ( #6812 )
6 years ago
25ee8e74f7
Update README.md ( #6832 )
6 years ago
c975d2cc7e
Update README.md ( #6833 )
6 years ago
ea66528739
Update gcs.md ( #6835 )
6 years ago
dd8c2aa5c6
Cleanup Kubernetes documentation ( #6861 )
...
Also add details on why Readiness checks are not recommended for Minio
StatefulSets.
6 years ago
9e3fce441e
Audit log claims from token ( #6847 )
6 years ago
2fc024e880
Update yaml files to latest version RELEASE.2018-11-22T02-51-56Z
6 years ago
32d837cf88
Update yaml files to latest version RELEASE.2018-11-17T01-23-48Z
6 years ago
2929c1832d
Add sample STS request/response output ( #6794 )
6 years ago
ca7c3a3278
Add 'mc config host add' command in multi-user doc ( #6777 )
6 years ago
71c66464c1
feature: added nsq as broker for events ( #6740 )
6 years ago
88959ce600
Format correction in server limits doc ( #6773 )
6 years ago
bdea19b583
Update yaml files to latest version RELEASE.2018-11-06T01-01-02Z
6 years ago
eb1f9c9916
Update KMS readme with vault quick start guide ( #6747 )
6 years ago
bef0318c36
Support audit logs with additional fields ( #6738 )
...
This PR adds support
- Request query params
- Request headers
- Response headers
AuditLogEntry is exported and versioned as well
starting with this PR.
6 years ago
6491dfbbd6
Fix etcd TLS handling ( #6748 )
...
etcd fails to connect if TLS config is set, make TLS
conditional to input arguments instead
6 years ago
9fe51e392b
Support etcd TLS certficates ( #6719 )
...
This PR supports two models for etcd certs
- Client-to-server transport security with HTTPS
- Client-to-server authentication with HTTPS client certificates
6 years ago
7e879a45d5
Add policy claim support for JWT ( #6660 )
...
This way temporary credentials can use canned
policies on the server without configuring OPA.
6 years ago
bab4c90c45
Fix broken links in docs ( #6700 )
6 years ago
a2fc0b14d6
Update yaml files to latest version RELEASE.2018-10-25T01-27-03Z
6 years ago
fde8c38638
Add default canned policies ( #6690 )
6 years ago
e6252dee5a
Fix links not working on Docs site ( #6692 )
...
The relative link paths that weren't working have been changed to
direct links to the corresponding Github pages.
6 years ago
7b7be66fa1
Cleanup Kubernetes documentation ( #6678 )
6 years ago
32bd1b31e9
Fix images for 8 node distributed deployment ( #6685 )
...
fixes #6633
6 years ago
f287b15e71
docs/minio-limits.md formatting ( #6683 )
...
Formatted docs to show missing "\" character, added "/" to list of unsupported chars and made note of the fact that list is not exhaustive.
6 years ago
06ef8248c3
docs: add link to s3 gateway ( #6666 )
...
Minor change: Add a link to S3 gateway to make it easier to find that info.
6 years ago
0edfb32621
Fix multi-user doc ( #6662 )
6 years ago
44cf9ac62f
Update yaml files to latest version RELEASE.2018-10-18T00-28-58Z
6 years ago
3457e504cf
Spelling changes and fixed link ( #6596 )
6 years ago
26b4b466df
Fix a typo in multi-user doc ( #6643 )
6 years ago
ef585037a0
Update config documentation ( #6634 )
6 years ago
1e7e5e297c
Add canned policy support ( #6637 )
...
This PR adds an additional API where we can create
a new set of canned policies which can be used with one
or many users.
6 years ago
557f382477
cache: remove cache space constraint ( #6635 )
...
relax cache constraint of requiring 100 times size of object
being cached for better cache utilization.
6 years ago
143e7fe300
Add etcd support to support STS on gateway mode ( #6531 )
6 years ago
Eco