Re: [ceph-users] Object Gateway - Server Side Encryption

2019-05-28 Thread Scheurer François
= And of course this rgwuser need the read permissions on the barbican secret. Best Regards Francois From: ceph-users on behalf of Casey Bodley Sent: Thursday, April 25, 2019 7:21 PM To: ceph-users@lists.ceph.com Subject: Re: [ceph-users] Object Gateway

Re: [ceph-users] Object Gateway - Server Side Encryption

2019-04-25 Thread Casey Bodley
On 4/25/19 11:33 AM, Francois Scheurer wrote: Hello Amardeep We are trying the same as you on luminous. s3cmd --access_key xxx  --secret_key xxx  --host-bucket '%(bucket)s.s3.xxx.ch' --host s3.xxx.ch --signature-v2 --no-preserve --server-side-encryption \ --server-side-encryption-kms-idhttps://

[ceph-users] Object Gateway - Server Side Encryption

2019-04-25 Thread Francois Scheurer
Hello Amardeep We are trying the same as you on luminous. s3cmd --access_key xxx  --secret_key xxx  --host-bucket '%(bucket)s.s3.xxx.ch' --host s3.xxx.ch --signature-v2 --no-preserve --server-side-encryption \ --server-side-encryption-kms-id https://barbican.service.xxx.ch/v1/secrets/ffa60094-

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-21 Thread Vik Tara
On 15/03/18 10:45, Vik Tara wrote: > > On 14/03/18 12:31, Amardeep Singh wrote: > >> Though I have now another issue because I am using Multisite setup >> with one zone for data and second zone for metadata with elastic >> search tier. >> >> http://docs.ceph.com/docs/master/radosgw/elastic-sync-m

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-15 Thread Vik Tara
On 14/03/18 12:31, Amardeep Singh wrote: > Though I have now another issue because I am using Multisite setup > with one zone for data and second zone for metadata with elastic > search tier. > > http://docs.ceph.com/docs/master/radosgw/elastic-sync-module/ > > When document is encrypted the metad

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-14 Thread Amardeep Singh
On Tuesday 13 March 2018 10:32 PM, Casey Bodley wrote: On 03/10/2018 12:58 AM, Amardeep Singh wrote: On Saturday 10 March 2018 02:01 AM, Casey Bodley wrote: On 03/08/2018 07:16 AM, Amardeep Singh wrote: Hi, I am trying to configure server side encryption using Key Management Service as per

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-13 Thread Casey Bodley
On 03/10/2018 12:58 AM, Amardeep Singh wrote: On Saturday 10 March 2018 02:01 AM, Casey Bodley wrote: On 03/08/2018 07:16 AM, Amardeep Singh wrote: Hi, I am trying to configure server side encryption using Key Management Service as per documentation http://docs.ceph.com/docs/master/radosgw

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-09 Thread Amardeep Singh
On Saturday 10 March 2018 02:01 AM, Casey Bodley wrote: On 03/08/2018 07:16 AM, Amardeep Singh wrote: Hi, I am trying to configure server side encryption using Key Management Service as per documentation http://docs.ceph.com/docs/master/radosgw/encryption/ Configured Keystone/Barbican inte

Re: [ceph-users] Object Gateway - Server Side Encryption

2018-03-09 Thread Casey Bodley
On 03/08/2018 07:16 AM, Amardeep Singh wrote: Hi, I am trying to configure server side encryption using Key Management Service as per documentation http://docs.ceph.com/docs/master/radosgw/encryption/ Configured Keystone/Barbican integration and its working, tested using curl commands. Aft

[ceph-users] Object Gateway - Server Side Encryption

2018-03-08 Thread Amardeep Singh
Hi, I am trying to configure server side encryption using Key Management Service as per documentation http://docs.ceph.com/docs/master/radosgw/encryption/ Configured Keystone/Barbican integration and its working, tested using curl commands. After I configure RadosGW and use boto.s3.connectio