search

minio / kes

Key Managament Server for Object Storage and more
https://min.io/docs/kes/concepts/
GNU Affero General Public License v3.0
456 stars 95 forks source link

kesconf: expose public API #414

Closed aead closed 10 months ago

aead commented 10 months ago

This commit exposes kes server confguration API and provides a dev server.

Now, the github.com/minio/kes/kesconf package exposes a stable API for reading the KES server configuration. This supersedes the kv package and removes the edge package.

Further, the KES server provides the --dev flag to start a KES server in development mode with a in-memory keystore. The --key, --cert and --auth are deprecated. Users should use the config file to provide such config options.

dbackeus commented 6 months ago

@aead the --auth deprecation messages states:

'--auth' flag is deprecated and no longer honored. Specify the client certificate verification in the config file

However I have not found any documentation for how to set this flag inside the config file. Can you elaborate?

It's a bit confusing right now trying to follow the official KES docs such as https://min.io/docs/kes/concepts/ as they still mention usig the --auth flag to bypass CA verification. Also note that all the various MinIO tutorials are using self signed certificates.