MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-07 04:42:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add KMS master key from Docker secret (#7825)

Browse Source
This commit is contained in:
Lucas
2019-07-17 21:55:26 +02:00
committed by kannappanr
parent 55dd017e62
commit ea66a52ed1
5 changed files with 40 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
dockerscripts/docker-entrypoint.sh
View File

@@ -39,6 +39,17 @@ docker_secrets_env() {
fi
}
## Set SSE_MASTER_KEY from docker secrets if provided
docker_sse_encryption_env() {
SSE_MASTER_KEY_FILE="/run/secrets/$MINIO_SSE_MASTER_KEY_FILE"
if [ -f "$SSE_MASTER_KEY_FILE" ]; then
MINIO_SSE_MASTER_KEY="$(cat "$SSE_MASTER_KEY_FILE")"
export MINIO_SSE_MASTER_KEY
fi
}
# su-exec to requested user, if service cannot run exec will fail.
docker_switch_user() {
if [ -z "${MINIO_USERNAME}" ] || [ -z "${MINIO_GROUPNAME}" ]; then
@@ -55,5 +66,8 @@ docker_switch_user() {
## Set access env from secrets if necessary.
docker_secrets_env
## Set sse encryption from secrets if necessary.
docker_sse_encryption_env
## Switch to user if applicable.
docker_switch_user "$@"