Date
1 - 5 of 5
Cloud Controller - s3 encryption for droplets
William C Penrod
The blobstore properties in bosh allows you to enter an encryption key to encrypt the data before it is pushed up to an s3 bucket. In the cloud foundry deploy, can this encryption property be added for the s3 connection in the cloud controller for droplets?
|
|
Dieu Cao <dcao@...>
I don't believe this is a bosh feature. Checked with Dmitriy and he
toggle quoted message
Show quoted text
confirms. Could you share any links that indicate that bosh supports that? We could look to improve the documentation in that area to be more clear. -Dieu On Mon, Nov 9, 2015 at 3:35 PM, William C Penrod <wcpenrod(a)gmail.com> wrote:
The blobstore properties in bosh allows you to enter an encryption key to |
|
William C Penrod
I first ran across it here:
http://cloudfoundryjp.github.io/docs/running/bosh/components/blobstore.html and checked here for additional info: https://github.com/cloudfoundry/bosh/blob/master/blobstore_client/lib/blobstore_client/s3_blobstore_client.rb |
|
Noburou TANIGUCHI
William and all,
Sorry for an off-topic post. http://cloudfoundryjp.github.io/ is totally old and shouldn't be referred as a reliable source of information. I had asked a member of the owning organization to delete the repository and now it was deleted. William C Penrod wrote I first ran across it here: ----- I'm not a ... noburou taniguchi -- View this message in context: http://cf-dev.70369.x6.nabble.com/cf-dev-Cloud-Controller-s3-encryption-for-droplets-tp2637p2684.html Sent from the CF Dev mailing list archive at Nabble.com. |
|
Dieu Cao <dcao@...>
Hi William,
Thanks for the links. We don't have support for client side encryption currently. Cloud Controller and Diego's blobstore clients would need to be modified to encrypt and decrypt for client side encryption and I'm not clear what strategies exist for rotation of keys in these scenarios. If you're very interested in this feature and are open to working through requirements with me and submitting a PR, please open up an issue on github and we can discuss this further. -Dieu On Tue, Nov 10, 2015 at 4:16 PM, William C Penrod <wcpenrod(a)gmail.com> wrote: I first ran across it here: |
|