a0d0645128
In almost all scenarios MinIO now is mostly ready for all sub-systems independently, safe-mode is not useful anymore and do not serve its original intended purpose. allow server to be fully functional even with config partially configured, this is to cater for availability of actual I/O v/s manually fixing the server. In k8s like environments it will never make sense to take pod into safe-mode state, because there is no real access to perform any remote operation on them.
61 lines
1.8 KiB
Go
61 lines
1.8 KiB
Go
/*
|
|
* MinIO Cloud Storage, (C) 2020 MinIO, Inc.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"io"
|
|
|
|
bucketsse "github.com/minio/minio/pkg/bucket/encryption"
|
|
)
|
|
|
|
// BucketSSEConfigSys - in-memory cache of bucket encryption config
|
|
type BucketSSEConfigSys struct{}
|
|
|
|
// NewBucketSSEConfigSys - Creates an empty in-memory bucket encryption configuration cache
|
|
func NewBucketSSEConfigSys() *BucketSSEConfigSys {
|
|
return &BucketSSEConfigSys{}
|
|
}
|
|
|
|
// Get - gets bucket encryption config for the given bucket.
|
|
func (sys *BucketSSEConfigSys) Get(bucket string) (*bucketsse.BucketSSEConfig, error) {
|
|
if globalIsGateway {
|
|
objAPI := newObjectLayerFn()
|
|
if objAPI == nil {
|
|
return nil, errServerNotInitialized
|
|
}
|
|
|
|
return nil, BucketSSEConfigNotFound{Bucket: bucket}
|
|
}
|
|
|
|
return globalBucketMetadataSys.GetSSEConfig(bucket)
|
|
}
|
|
|
|
// validateBucketSSEConfig parses bucket encryption configuration and validates if it is supported by MinIO.
|
|
func validateBucketSSEConfig(r io.Reader) (*bucketsse.BucketSSEConfig, error) {
|
|
encConfig, err := bucketsse.ParseBucketSSEConfig(r)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if len(encConfig.Rules) == 1 && encConfig.Rules[0].DefaultEncryptionAction.Algorithm == bucketsse.AES256 {
|
|
return encConfig, nil
|
|
}
|
|
|
|
return nil, errors.New("Unsupported bucket encryption configuration")
|
|
}
|