So WAL-E uses S3 bucker encryption by default?

On Tuesday, December 1, 2015 at 2:40:33 PM UTC-7, Daniel Farina wrote:
>
> On Tue, Dec 1, 2015 at 12:29 PM Christophe Pettus <[email protected] 
> <javascript:>> wrote:
>
>> Is there a way of setting the S3 encryption header for WAL-E?  My 
>> understanding is that to get S3 bucket encryption going, it has to be set 
>> on a per-request basis.
>>
>
> I believe this has been the case for some time:
>
> $ git describe 9b6ede3eee74b98bb6187377ed42dc0a54ce5459
> v0.7.0-15-g9b6ede3
>
> $ git branch --contains 9b6ede3eee74b98bb6187377ed42dc0a54ce5459 -r | 
> fgrep v0.8
>   wal-e/v0.8
>
> $ git show 9b6ede3eee74b98bb6187377ed42dc0a54ce5459
> commit 9b6ede3eee74b98bb6187377ed42dc0a54ce5459
> Author: raananraz <[email protected] <javascript:>>
> Date:   Mon May 5 11:16:13 2014 +0300
>
>     Require use of S3 server side encryption
>     
>     So far, it does not appear as though it has any obvious performance or
>     usability impacts.
>
> diff --git a/wal_e/blobstore/s3/s3_util.py b/wal_e/blobstore/s3/s3_util.py
> index 6828ec3..469d305 100644
> --- a/wal_e/blobstore/s3/s3_util.py
> +++ b/wal_e/blobstore/s3/s3_util.py
> @@ -51,7 +51,7 @@ def uri_put_file(creds, uri, fp, content_encoding=None, 
> conn=None):
>      if content_encoding is not None:
>          k.content_type = content_encoding
>  
> -    k.set_contents_from_file(fp)
> +    k.set_contents_from_file(fp, encrypt_key=True)
>      return k
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"wal-e" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to