appscode / osm

🚚 ☁️ Object Store Manipulator - curl for cloud storage
Apache License 2.0
168 stars 9 forks source link

Support S3 bucket endpoints which are not TLS enabled #56

Closed dhrp closed 3 years ago

dhrp commented 3 years ago

OSM does not seem to support S3 Endpoints without TLS. This is annoying because you may want to use a local Minio cluster, and have it on the same cluster..

As a result I believe the stash s3 backend needs to always be TLS https://stash.run/docs/v2020.11.17/guides/latest/backends/s3/

Since you're on the same cluster adding TLS gives no extra benefits, but does give additional overhead for encrypting and decrypting the entire stream.

What I wanted to do is use the tardigrade S3 gateway. It is designed to run near the client and doen't natively support TLS, but is meant to run in your cluster.

Besides these points, it's just handy..

hossainemruz commented 3 years ago

OSM does support Minio without TLS. What's make you thinking it doesn't?

dhrp commented 3 years ago

ok, we found the issue, with regards to using minio without TLS. The magic to do is put http:// in front of the endpoint address.