MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-02-09 20:58:08 -05:00
Code Issues Packages Projects Releases Wiki Activity

support relative paths for KMS_SECRET_KEY_FILE (#20264)

Browse Source 
fixes #20251
This commit is contained in:
Harshavardhana 2024-08-15 04:46:39 -07:00 committed by GitHub
parent d96798ae7b
commit 3b1aa40372
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
internal/kms/config.go
View File

@ -26,6 +26,7 @@ import (
"errors" "errors"
"fmt" "fmt"
"os" "os"
"path/filepath"
"strings" "strings"
"sync/atomic" "sync/atomic"
"syscall" "syscall"
@ -254,6 +255,13 @@ func Connect(ctx context.Context, opts *ConnectionOptions) (*KMS, error) {
var s string var s string
if lookup(EnvKMSSecretKeyFile) { if lookup(EnvKMSSecretKeyFile) {
b, err := os.ReadFile(env.Get(EnvKMSSecretKeyFile, "")) b, err := os.ReadFile(env.Get(EnvKMSSecretKeyFile, ""))
if err != nil && !os.IsNotExist(err) {
return nil, err
}
if os.IsNotExist(err) {
// Relative path where "/run/secrets" is the default docker path for secrets
b, err = os.ReadFile(filepath.Join("/run/secrets", env.Get(EnvKMSSecretKeyFile, "")))
}
if err != nil { if err != nil {
return nil, err return nil, err
} }