KMS Crypto for backups is a no-op.

pshima / consul-snapshot

consul-snapshot is a backup and restore utility for Consul (https://www.consul.io). This is slightly different than some other utilities out there as this runs as a daemon for backups and ships them to S3. Also has integrated monitoring and backup health checks.

Apache License 2.0

116 stars 35 forks source link

KMS Crypto for backups is a no-op. #29

Closed jjwwiodyne closed 5 years ago

jjwwiodyne commented 5 years ago

Specifying CONSUL_SNAPSHOT_S3_SSE and CONSUL_SNAPSHOT_S3_SSE_KMS_KEY_ID does not encrypt backups. Looking at the code these env variables are stored in Go variables at startup but never referenced again.

jjwwiodyne commented 5 years ago

This is working as expected.