Andreas Auernhammer 3455f786fa kms: encrypt IAM/config data with the KMS (#12041) ... This commit changes the config/IAM encryption process. Instead of encrypting config data (users, policies etc.) with the root credentials MinIO now encrypts this data with a KMS - if configured. Therefore, this PR moves the MinIO-KMS configuration (via env. variables) to a "top-level" configuration. The KMS configuration cannot be stored in the config file since it is used to decrypt the config file in the first place. As a consequence, this commit also removes support for Hashicorp Vault - which has been deprecated anyway. Signed-off-by: Andreas Auernhammer <aead@mail.de>		2021-04-22 09:51:09 -07:00
..
config_test.go	Export command prints turned-off sub-sys as comments (#8594)	2019-12-03 10:50:20 -08:00
config.go	Add async caching commit option in diskcache (#10742)	2020-11-02 10:00:45 -08:00
help.go	fix: normalize object layer inputs (#11534)	2021-03-09 12:58:22 -08:00
legacy.go	Final changes to config sub-system (#8600)	2019-12-04 15:32:37 -08:00
lookup.go	kms: encrypt IAM/config data with the KMS (#12041)	2021-04-22 09:51:09 -07:00