Skip to content

Commit

Permalink
K8SPSMDB-850 - Server Side Encryption Support (#1198)
Browse files Browse the repository at this point in the history
* K8SPSMDB-850 - Server Side Encryption Support

* fmt

* manifests

* update `cr.yamll`

* update `restore.yaml`

---------

Co-authored-by: Viacheslav Sarzhan <[email protected]>
Co-authored-by: Ege Güneş <[email protected]>
Co-authored-by: Andrii Dema <[email protected]>
  • Loading branch information
4 people authored Sep 19, 2023
1 parent 5b31035 commit 3c58298
Show file tree
Hide file tree
Showing 13 changed files with 280 additions and 9 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -119,6 +119,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
16 changes: 16 additions & 0 deletions config/crd/bases/psmdb.percona.com_perconaservermongodbs.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -258,6 +258,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
5 changes: 5 additions & 0 deletions deploy/backup/restore.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,11 @@ spec:
# destination: s3://S3-BACKUP-BUCKET-NAME-HERE/BACKUP-DESTINATION
# s3:
# credentialsSecret: my-cluster-name-backup-s3
# serverSideEncryption:
# kmsKeyID: 1234abcd-12ab-34cd-56ef-1234567890ab
# sseAlgorithm: AES256
# sseCustomerAlgorithm: AES256
# sseCustomerKey: Y3VzdG9tZXIta2V5
# region: us-west-2
# bucket: S3-BACKUP-BUCKET-NAME-HERE
# endpointUrl: https://s3.us-west-2.amazonaws.com/
Expand Down
48 changes: 48 additions & 0 deletions deploy/bundle.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -231,6 +247,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -863,6 +895,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
5 changes: 5 additions & 0 deletions deploy/cr.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -517,6 +517,11 @@ spec:
# s3:
# bucket: S3-BACKUP-BUCKET-NAME-HERE
# credentialsSecret: my-cluster-name-backup-s3
# serverSideEncryption:
# kmsKeyID: 1234abcd-12ab-34cd-56ef-1234567890ab
# sseAlgorithm: AES256
# sseCustomerAlgorithm: AES256
# sseCustomerKey: Y3VzdG9tZXIta2V5
# region: us-west-2
# prefix: ""
# uploadPartSize: 10485760
Expand Down
48 changes: 48 additions & 0 deletions deploy/crd.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -231,6 +247,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -863,6 +895,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
48 changes: 48 additions & 0 deletions deploy/cw-bundle.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -231,6 +247,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -863,6 +895,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
48 changes: 48 additions & 0 deletions e2e-tests/version-service/conf/crd.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -231,6 +247,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down Expand Up @@ -863,6 +895,22 @@ spec:
type: string
region:
type: string
serverSideEncryption:
properties:
kmsKeyID:
type: string
sseAlgorithm:
type: string
sseCustomerAlgorithm:
type: string
sseCustomerKey:
type: string
required:
- kmsKeyID
- sseAlgorithm
- sseCustomerAlgorithm
- sseCustomerKey
type: object
storageClass:
type: string
uploadPartSize:
Expand Down
Loading

0 comments on commit 3c58298

Please sign in to comment.