]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/kms/vault - define attribute to store encryption context
authorMarcus Watts <mwatts@redhat.com>
Mon, 7 Dec 2020 22:53:05 +0000 (17:53 -0500)
committerMarcus Watts <mwatts@redhat.com>
Fri, 5 Mar 2021 22:35:27 +0000 (17:35 -0500)
commit2ea143711430cb76c55479fdfbf7ba02d1fd80fb
treef6fe7bc1df5980d1ddac9acb089d81ef10bcc51f
parent89959fb1946c82e48144ba29f9587932730c396b
rgw/kms/vault - define attribute to store encryption context

For rgw sse:kms use, the aws s3 standard provides an attribute
to store the base-64 encoded canonical json "encryption context".
This should be used to vary the per-object keys used for the
actual object encryption.

Fixes: http://tracker.ceph.com/issues/48746
Signed-off-by: Marcus Watts <mwatts@redhat.com>
src/rgw/rgw_common.h