github.com/minio/minio@v0.0.0-20240328213742-3f72439b8a27/internal/crypto/auto-encryption.go (about)

     1  // Copyright (c) 2015-2021 MinIO, Inc.
     2  //
     3  // This file is part of MinIO Object Storage stack
     4  //
     5  // This program is free software: you can redistribute it and/or modify
     6  // it under the terms of the GNU Affero General Public License as published by
     7  // the Free Software Foundation, either version 3 of the License, or
     8  // (at your option) any later version.
     9  //
    10  // This program is distributed in the hope that it will be useful
    11  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    12  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    13  // GNU Affero General Public License for more details.
    14  //
    15  // You should have received a copy of the GNU Affero General Public License
    16  // along with this program.  If not, see <http://www.gnu.org/licenses/>.
    17  
    18  package crypto
    19  
    20  import (
    21  	"github.com/minio/minio/internal/config"
    22  	"github.com/minio/pkg/v2/env"
    23  )
    24  
    25  const (
    26  	// EnvKMSAutoEncryption is the environment variable used to en/disable
    27  	// SSE-S3 auto-encryption. SSE-S3 auto-encryption, if enabled,
    28  	// requires a valid KMS configuration and turns any non-SSE-C
    29  	// request into an SSE-S3 request.
    30  	// If present EnvAutoEncryption must be either "on" or "off".
    31  	EnvKMSAutoEncryption = "MINIO_KMS_AUTO_ENCRYPTION"
    32  )
    33  
    34  // LookupAutoEncryption returns true if and only if
    35  // the MINIO_KMS_AUTO_ENCRYPTION env. variable is
    36  // set to "on".
    37  func LookupAutoEncryption() bool {
    38  	auto, _ := config.ParseBool(env.Get(EnvKMSAutoEncryption, config.EnableOff))
    39  	return auto
    40  }