Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mc put options vs mc get flags for encryption with kms. #5051

Closed
prakashsvmx opened this issue Oct 1, 2024 · 0 comments
Closed

mc put options vs mc get flags for encryption with kms. #5051

prakashsvmx opened this issue Oct 1, 2024 · 0 comments

Comments

@prakashsvmx
Copy link
Member

Expected behavior

mc put and mc get should have similar flags for enc-kms

Actual behavior

mc get is missing enc-kms option for example

Steps to reproduce the behavior

➜ mc get -h      

NAME:                                                                                                                                              
  mc get - get s3 object to local                                                                                                                  
                                                                                                                                                   
USAGE:                                                                                                                                             
  mc get [FLAGS] SOURCE TARGET                                                                                                                     
                                                                                                                                                   
FLAGS:                                                                                                                                             
...       
  --enc-c value                    encrypt/decrypt objects using client provided keys. (multiple keys can be provided) Formats: RawBase64 or Hex.  
  --version-id value, --vid value  get a specific version of an object                                                                             
  --help, -h                       show help                                                                                                       
                                                                                                                                                   
                                                                                                                                                   
EXAMPLES:                                                                                                                                          
  1. Get an object from MinIO storage to local file system                                                                                         
     $ mc get play/mybucket/object path-to/object                                                                                                  
                                                                                                                                                   
  2. Get an object from MinIO storage using encryption                                                                                             
     $ mc get --enc-c "play/mybucket/object=MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDA" play/mybucket/object path-to/object                       
                                                                                                                                                   
                                         
NAME:                                                                                                                                                                                                         
  mc put - upload an object to a bucket                                                                                                                                                                       
                                                                                                                                                                                                              
USAGE:                                                                                                                                                                                                        
  mc put [FLAGS] SOURCE TARGET                                                                                                                                                                                
                                                                                                                                                                                                              
FLAGS:                                                                                                                                                                                                        
  --enc-c value                 encrypt/decrypt objects using client provided keys. (multiple keys can be provided) Formats: RawBase64 or Hex.                                                                
  --enc-kms value               encrypt/decrypt objects using specific server-side encryption keys. (multiple keys can be provided) [$MC_ENC_KMS]                                                             
  --enc-s3 value                encrypt/decrypt objects using server-side default keys and configurations. (multiple keys can be provided). [$MC_ENC_S3]                                                      
 ....                                                                                                              
  --help, -h                    show help                                                                                                                                                                     
                                                                                                                                                                                                              
                                                                                                                                                                                                              
ENVIRONMENT VARIABLES:                                                                                                                                                                                        
  MC_ENC_KMS: KMS encryption key in the form of (alias/prefix=key).                                                                                                                                           
  MC_ENC_S3: S3 encryption key in the form of (alias/prefix=key).                                                                                                                                             
                                                                                                                                                                                                              
EXAMPLES:                                                                                                                                                                                                     
....                                                                                                                                                                                       
  4. Put an object to MinIO storage using sse-c encryption                                                                                                                                                    
     $ mc put --enc-c "play/mybucket/object=MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDA" path-to/object play/mybucket/object                                                                                  
                                                                                                                                                                                                              
  5. Put an object to MinIO storage using sse-kms encryption                                                                                                                                                  
     $ mc put --enc-kms path-to/object play/mybucket/object          

mc --version

mc --version
mc version RELEASE.2024-09-16T17-43-14Z (commit-id=11ebe952ea30e426e564f66e78d178465ae7c432)
Runtime: go1.22.6 linux/amd64
Copyright (c) 2015-2024 MinIO, Inc.
License GNU AGPLv3 https://www.gnu.org/licenses/agpl-3.0.html

System information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant