Cloud Controller - s3 encryption for droplets


William C Penrod
 

The blobstore properties in bosh allows you to enter an encryption key to encrypt the data before it is pushed up to an s3 bucket. In the cloud foundry deploy, can this encryption property be added for the s3 connection in the cloud controller for droplets?


Dieu Cao <dcao@...>
 

I don't believe this is a bosh feature. Checked with Dmitriy and he
confirms.
Could you share any links that indicate that bosh supports that?
We could look to improve the documentation in that area to be more clear.

-Dieu

On Mon, Nov 9, 2015 at 3:35 PM, William C Penrod <wcpenrod(a)gmail.com> wrote:

The blobstore properties in bosh allows you to enter an encryption key to
encrypt the data before it is pushed up to an s3 bucket. In the cloud
foundry deploy, can this encryption property be added for the s3 connection
in the cloud controller for droplets?


William C Penrod
 


Noburou TANIGUCHI
 

William and all,

Sorry for an off-topic post.

http://cloudfoundryjp.github.io/ is totally old and shouldn't be referred as
a reliable source of information.

I had asked a member of the owning organization to delete the repository and
now it was deleted.


William C Penrod wrote
I first ran across it here:
http://cloudfoundryjp.github.io/docs/running/bosh/components/blobstore.html

and checked here for additional info:
https://github.com/cloudfoundry/bosh/blob/master/blobstore_client/lib/blobstore_client/s3_blobstore_client.rb




-----
I'm not a ...
noburou taniguchi
--
View this message in context: http://cf-dev.70369.x6.nabble.com/cf-dev-Cloud-Controller-s3-encryption-for-droplets-tp2637p2684.html
Sent from the CF Dev mailing list archive at Nabble.com.


Dieu Cao <dcao@...>
 

Hi William,

Thanks for the links.
We don't have support for client side encryption currently.
Cloud Controller and Diego's blobstore clients would need to be modified to
encrypt and decrypt for client side encryption and I'm not clear what
strategies exist for rotation of keys in these scenarios.

If you're very interested in this feature and are open to working through
requirements with me and submitting a PR, please open up an issue on github
and we can discuss this further.

-Dieu

On Tue, Nov 10, 2015 at 4:16 PM, William C Penrod <wcpenrod(a)gmail.com>
wrote:

I first ran across it here:
http://cloudfoundryjp.github.io/docs/running/bosh/components/blobstore.html

and checked here for additional info:

https://github.com/cloudfoundry/bosh/blob/master/blobstore_client/lib/blobstore_client/s3_blobstore_client.rb