mirror of
https://github.com/minio/minio.git
synced 2024-12-25 14:45:54 -05:00
4d2fc530d0
This commit adds support for bulk ETag decryption for SSE-S3 encrypted objects. If KES supports a bulk decryption API, then MinIO will check whether its policy grants access to this API. If so, MinIO will use a bulk API call instead of sending encrypted ETags serially to KES. Note that MinIO will not use the KES bulk API if its client certificate is an admin identity. MinIO will process object listings in batches. A batch has a configurable size that can be set via `MINIO_KMS_KES_BULK_API_BATCH_SIZE=N`. It defaults to `500`. This env. variable is experimental and may be renamed / removed in the future. Signed-off-by: Andreas Auernhammer <hi@aead.dev> |
||
---|---|---|
.. | ||
context.go | ||
dek_test.go | ||
kes.go | ||
kms.go | ||
single-key_test.go | ||
single-key.go |