Nitish Tiwari
65ddff8899
Fix NAS Gateway Docker command example ( #6967 )
...
Fixes #6965
2018-12-18 14:37:17 -08:00
Andreas Auernhammer
5a5895203b
add howto generate a master key and add master key disclaimer ( #6992 )
...
This commit adds a section to the master key documentation
describing how to generate a random 256 bit master key.
Further this commit adds a warning that master keys are not
recommended for production systems because it's (currently)
not possible to replace a master key (e.g. in case of compromise).
2018-12-18 13:00:32 -08:00
Eco
b6f9b24b30
Small corrections and example for auto-encryption ( #6982 )
2018-12-14 16:21:41 -08:00
poornas
13cb814a0e
update KMS README.md to set approle env ( #6978 )
2018-12-14 14:03:16 -08:00
Andreas Auernhammer
d264d2c899
add auto-encryption feature ( #6523 )
...
This commit adds an auto-encryption feature which allows
the Minio operator to ensure that uploaded objects are
always encrypted.
This change adds the `autoEncryption` configuration option
as part of the KMS conifguration and the ENV. variable
`MINIO_SSE_AUTO_ENCRYPTION:{on,off}`.
It also updates the KMS documentation according to the
changes.
Fixes #6502
2018-12-14 13:35:48 -08:00
Minio Trusted
48cb0ea34b
Update yaml files to latest version RELEASE.2018-12-13T02-04-19Z
2018-12-13 02:09:53 +00:00
Andreas Auernhammer
21d8c0fd13
refactor vault configuration and add master-key KMS ( #6488 )
...
This refactors the vault configuration by moving the
vault-related environment variables to `environment.go`
(Other ENV should follow in the future to have a central
place for adding / handling ENV instead of magic constants
and handling across different files)
Further this commit adds master-key SSE-S3 support.
The operator can specify a SSE-S3 master key using
`MINIO_SSE_MASTER_KEY` which will be used as master key
to derive and encrypt per-object keys for SSE-S3
requests.
This commit is also a pre-condition for SSE-S3
auto-encyption support.
Fixes #6329
2018-12-12 12:20:29 +05:30
Harshavardhana
b9b353db4b
Add env to support synchronous ops for all calls ( #6877 )
2018-12-11 16:22:56 -08:00
James Neiman, President
313ba74b09
Update to Minio GCS Gateway ( #6887 )
2018-12-06 10:09:37 -08:00
Minio Trusted
78a0fd951e
Update yaml files to latest version RELEASE.2018-12-06T01-27-43Z
2018-12-06 01:35:43 +00:00
James Neiman, President
950b4ad9af
Update to How to secure access to Minio server with TLS ( #6845 )
2018-12-04 17:30:39 -08:00
Andreas Auernhammer
5549a44566
rename vault namespace env variable to be more idiomatic ( #6905 )
...
This commit renames the env variable for vault namespaces
such that it begins with `MINIO_SSE_`. This is the prefix
for all Minio SSE related env. variables (like KMS).
2018-12-01 05:28:49 -08:00
Praveen raj Mani
e7af31c2ff
Removed `clientID` from NATS-Streaming Config ( #6391 )
...
clientID must be a unique `UUID` for each connections. Now, the
server generates it, rather considering the config.
Removing it as it is non-beneficial right now.
Fixes #6364
2018-11-30 10:46:17 +05:30
Minio Trusted
e7971b1d55
Update yaml files to latest version RELEASE.2018-11-30T03-56-59Z
2018-11-30 04:02:10 +00:00
poornas
6a8ccc5925
update README.md ( #6893 )
2018-11-29 15:50:57 -08:00
James Neiman, President
b50a245208
Update to Minio Multi-Tenant Deployment Guide ( #6871 )
...
Initial edits.
2018-11-27 18:03:07 -08:00
poornas
45bb11e020
Set namespace on vault client if VAULT_NAMESPACE env is set ( #6867 )
2018-11-27 14:42:32 -08:00
jingsam
b65cf281fd
Update azure.md ( #6834 )
2018-11-27 14:05:27 -08:00
Xie Yanbo
f781548b0c
fix typo ( #6812 )
2018-11-27 14:04:50 -08:00
jingsam
25ee8e74f7
Update README.md ( #6832 )
2018-11-27 14:04:11 -08:00
jingsam
c975d2cc7e
Update README.md ( #6833 )
2018-11-27 14:03:08 -08:00
jingsam
ea66528739
Update gcs.md ( #6835 )
2018-11-27 14:02:23 -08:00
Nitish Tiwari
dd8c2aa5c6
Cleanup Kubernetes documentation ( #6861 )
...
Also add details on why Readiness checks are not recommended for Minio
StatefulSets.
2018-11-25 13:34:20 -08:00
Harshavardhana
9e3fce441e
Audit log claims from token ( #6847 )
2018-11-22 09:33:24 +05:30
Minio Trusted
2fc024e880
Update yaml files to latest version RELEASE.2018-11-22T02-51-56Z
2018-11-22 02:57:28 +00:00
Minio Trusted
32d837cf88
Update yaml files to latest version RELEASE.2018-11-17T01-23-48Z
2018-11-17 01:30:29 +00:00
Harshavardhana
2929c1832d
Add sample STS request/response output ( #6794 )
2018-11-12 07:53:55 -08:00
Harshavardhana
ca7c3a3278
Add 'mc config host add' command in multi-user doc ( #6777 )
2018-11-08 09:42:47 -08:00
Matthias Schneider
71c66464c1
feature: added nsq as broker for events ( #6740 )
2018-11-07 10:23:13 -08:00
Eco
88959ce600
Format correction in server limits doc ( #6773 )
2018-11-06 14:50:11 -08:00
Minio Trusted
bdea19b583
Update yaml files to latest version RELEASE.2018-11-06T01-01-02Z
2018-11-06 01:05:53 +00:00
poornas
eb1f9c9916
Update KMS readme with vault quick start guide ( #6747 )
2018-11-05 13:01:18 -08:00
Harshavardhana
bef0318c36
Support audit logs with additional fields ( #6738 )
...
This PR adds support
- Request query params
- Request headers
- Response headers
AuditLogEntry is exported and versioned as well
starting with this PR.
2018-11-02 18:40:08 -07:00
Harshavardhana
6491dfbbd6
Fix etcd TLS handling ( #6748 )
...
etcd fails to connect if TLS config is set, make TLS
conditional to input arguments instead
2018-11-01 21:41:11 -07:00
Harshavardhana
9fe51e392b
Support etcd TLS certficates ( #6719 )
...
This PR supports two models for etcd certs
- Client-to-server transport security with HTTPS
- Client-to-server authentication with HTTPS client certificates
2018-10-29 11:14:12 -07:00
Harshavardhana
7e879a45d5
Add policy claim support for JWT ( #6660 )
...
This way temporary credentials can use canned
policies on the server without configuring OPA.
2018-10-29 11:08:59 -07:00
Harshavardhana
bab4c90c45
Fix broken links in docs ( #6700 )
2018-10-25 11:39:31 +05:30
Minio Trusted
a2fc0b14d6
Update yaml files to latest version RELEASE.2018-10-25T01-27-03Z
2018-10-25 01:31:57 +00:00
Harshavardhana
fde8c38638
Add default canned policies ( #6690 )
2018-10-24 17:14:27 -07:00
Kaan Kabalak
e6252dee5a
Fix links not working on Docs site ( #6692 )
...
The relative link paths that weren't working have been changed to
direct links to the corresponding Github pages.
2018-10-24 17:00:26 -07:00
Nitish Tiwari
7b7be66fa1
Cleanup Kubernetes documentation ( #6678 )
2018-10-23 18:22:43 +05:30
Nitish Tiwari
32bd1b31e9
Fix images for 8 node distributed deployment ( #6685 )
...
fixes #6633
2018-10-23 10:50:38 +05:30
Eco
f287b15e71
docs/minio-limits.md formatting ( #6683 )
...
Formatted docs to show missing "\" character, added "/" to list of unsupported chars and made note of the fact that list is not exhaustive.
2018-10-22 21:00:46 -07:00
Guido García
06ef8248c3
docs: add link to s3 gateway ( #6666 )
...
Minor change: Add a link to S3 gateway to make it easier to find that info.
2018-10-22 11:47:13 -07:00
Harshavardhana
0edfb32621
Fix multi-user doc ( #6662 )
2018-10-19 12:35:44 +05:30
Minio Trusted
44cf9ac62f
Update yaml files to latest version RELEASE.2018-10-18T00-28-58Z
2018-10-18 00:34:26 +00:00
Eco
3457e504cf
Spelling changes and fixed link ( #6596 )
2018-10-17 10:55:55 -07:00
Harshavardhana
26b4b466df
Fix a typo in multi-user doc ( #6643 )
2018-10-16 20:39:44 -07:00
Nitish Tiwari
ef585037a0
Update config documentation ( #6634 )
2018-10-16 16:45:04 -07:00
Harshavardhana
1e7e5e297c
Add canned policy support ( #6637 )
...
This PR adds an additional API where we can create
a new set of canned policies which can be used with one
or many users.
2018-10-16 12:48:19 -07:00