search

upmc-enterprises / elasticsearch-cron

CronJob container to perform snapshots of an elasticsearch cluster
10 stars 10 forks source link

encrypted snapshots #1

Closed ethanwinograd closed 6 years ago

ethanwinograd commented 6 years ago

is it possible to make this cron job write the snapshots out in an encrypted manner to s3?

ie. $ aws s3 cp text.txt s3://test-bucket --sse

stevesloka commented 6 years ago

Looks like when the repository is created, need to set the server_side_encryption flag (https://www.elastic.co/guide/en/elasticsearch/plugins/current/repository-s3-repository.html).

The update would go here: https://github.com/upmc-enterprises/elasticsearch-cron/blob/master/main.go#L57

ethanwinograd commented 6 years ago

for the change to be picked up we will need to deploy to docker hub and rebuild the operator with a pointer to the updated module, is that correct?

https://github.com/upmc-enterprises/elasticsearch-operator/blob/master/pkg/snapshot/scheduler.go#L41