hi David,

that method of encryption based on rgw_crypt_default_encryption_key
will never be officially supported. however, support for SSE-S3
encryption [1] is nearly complete in [2] (cc Marcus), and we hope to
include that in the quincy release - and if not, we'll backport it to
quincy in an early point release

can SSE-S3 with PutBucketEncryption satisfy your use case?

[1] 
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html
[2] https://github.com/ceph/ceph/pull/44494

On Tue, Feb 8, 2022 at 10:44 AM David Orman <orma...@corenode.com> wrote:
>
> Is RGW encryption for all objects at rest still testing only, and if not,
> which version is it considered stable in?:
>
> https://docs.ceph.com/en/latest/radosgw/encryption/#automatic-encryption-for-testing-only
>
> David
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-le...@ceph.io
>

_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to