minio

History

Andreas Auernhammer a6f4cf61f2 add `UpdateKey` method to KMS interface (#7974 ) This commit adds a new method `UpdateKey` to the KMS interface. The purpose of `UpdateKey` is to re-wrap an encrypted data key (the key generated & encrypted with a master key by e.g. Vault). For example, consider Vault with a master key ID: `master-key-1` and an encrypted data key `E(dk)` for a particular object. The data key `dk` has been generated randomly when the object was created. Now, the KMS operator may "rotate" the master key `master-key-1`. However, the KMS cannot forget the "old" value of that master key since there is still an object that requires `dk`, and therefore, the `D(E(dk))`. With the `UpdateKey` method call MinIO can ask the KMS to decrypt `E(dk)` with the old key (internally) and re-encrypted `dk` with the new master key value: `E'(dk)`. However, this operation only works for the same master key ID. When rotating the data key (replacing it with a new one) then we perform a `UnsealKey` operation with the 1st master key ID and then a `GenerateKey` operation with the 2nd master key ID. This commit also updates the KMS documentation and removes the `encrypt` policy entry (we don't use `encrypt`) and add a policy entry for `rewarp`.		5 years ago
..
bigdata	Update docs with new settings (#7803 )	5 years ago
bucket/notifications	Enable event persistence in AMQP (#7565 )	5 years ago
chroot	Removes the incorrect coverage badge from the docs (#7651 )	6 years ago
compression	Update compression README.md (#7823 )	5 years ago
config	Enable event persistence in AMQP (#7565 )	5 years ago
deployment/kernel-tuning	Removes the incorrect coverage badge from the docs (#7651 )	6 years ago
disk-caching	Revert "cache: Rewrite to cache only on download (#7575 )" (#7684 )	6 years ago
distributed	Add some design docs for distributed setup (#7950 )	5 years ago
docker	docs: Use --user to start container in non-root (#7966 )	5 years ago
erasure	docs: Fix dead link of HighwayHash (#7847 )	5 years ago
federation/lookup	Migrate minio etcd config to backend config (#7751 )	6 years ago
gateway	Add krb5 support for HDFS gateway (#7933 )	5 years ago
kms	add `UpdateKey` method to KMS interface (#7974 )	5 years ago
logging	Replace Minio refs in docs with MinIO and links (#7494 )	6 years ago
metrics	Replace Minio refs in docs with MinIO and links (#7494 )	6 years ago
multi-tenancy	Removes the incorrect coverage badge from the docs (#7651 )	6 years ago
multi-user	doc: "admin user policy" command typo (#7865 )	5 years ago
orchestration	Update yaml files to latest version RELEASE.2019-08-01T22-18-54Z	5 years ago
screenshots	doc: Merge large bucket with distributed docs (#7761 )	6 years ago
security	Replace Minio refs in docs with MinIO and links (#7494 )	6 years ago
select	Replace Minio refs in docs with MinIO and links (#7494 )	6 years ago
shared-backend	Removes the incorrect coverage badge from the docs (#7651 )	6 years ago
sts	Add support for session policies in STS APIs (#7747 )	5 years ago
tls	remove `encryption key` section for certtool docs (#7820 )	5 years ago
zh_CN	docs: Fix dead link of HighwayHash (#7847 )	5 years ago
minio-limits.md	Clarify server maximums via Federation (#7608 )	6 years ago