[HDDS-4005] Support S3 MPU on encrypted buckets

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Target Version/s: 1.2.0
• Assignee: Bharat Viswanadham
• Reporter: Bharat Viswanadham
• Created: 22/Jul/20 18:21
• Updated: 08/Oct/21 18:53
• Resolved: 08/Oct/21 18:53

Description

With HDDS-3612 buckets created via ozone are also accessible via S3.
This has caused a problem when the bucket is encrypted, the keys are not encrypted on disk.

2 Issues:
1. On OM, for each part a new encryption info is generated. During complete Multipart upload, the encryption info is not stored in KeyInfo.
2. On the client, for part upload, the encryption info is silently ignored.

Issue Links

• is cloned by: HDDS-4006 Disallow MPU on encrypted buckets.
• is related to: HDDS-4653 Support TDE for MPU Keys on Encrypted Buckets