Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -232,7 +232,7 @@ enableGitInfo = 'true'
weight = 31
[[menu.main]]
name = 'Docs'
url = 'https://min.io/docs/minio/kubernetes/upstream'
url = 'https://docs.min.io/community/minio-object-store/index.html'
weight = 3
[[menu.main]]
name = 'Blog'
Expand Down
2 changes: 1 addition & 1 deletion content/cli/kes-server/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@ KMS In Memory
API · https://127.0.0.1:7373/
· https://192.168.188.79:7373/

Docs https://min.io/docs/kes
Docs https://docs.min.io/community/minio-kes/

API Key kes:v1:ADsGCjJoWziQ82wPUG6oHbqhhlbkajaRGP+3+JSfx5Wq
Admin 7bbffa635fc160ef8048a344a53aab54e472e5c654c6339a9cec9223301808c7
Expand Down
6 changes: 3 additions & 3 deletions content/concepts/environment-variables.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,9 @@ The KES server grants the MinIO server access to only those operations explicitl
The name of an external key on the Key Management system (KMS) configured on the KES server and used for performing en/decryption operations.
MinIO uses this key for the following:

- Encrypting backend data ( [IAM](https://min.io/docs/minio/linux/administration/identity-access-management.html#minio-authentication-and-identity-management), server configuration).
- The default encryption key for Server-Side Encryption with [SSE-KMS](https://min.io/docs/minio/linux/administration/server-side-encryption/server-side-encryption-sse-kms.html#minio-encryption-sse-kms).
- The encryption key for Server-Side Encryption with [SSE-S3](https://min.io/docs/minio/linux/administration/server-side-encryption/server-side-encryption-sse-s3.html#minio-encryption-sse-s3).
- Encrypting backend data ([IAM](https://docs.min.io/community/minio-object-store/administration/identity-access-management.html), server configuration).
- The default encryption key for Server-Side Encryption with [SSE-KMS](https://docs.min.io/community/minio-object-store/administration/server-side-encryption/server-side-encryption-sse-kms.html#minio-encryption-sse-kms).
- The encryption key for Server-Side Encryption with [SSE-S3](https://docs.min.io/community/minio-object-store/administration/server-side-encryption/server-side-encryption-sse-s3.html#minio-encryption-sse-s3).

## `MINIO_KES_SERVER`

Expand Down
2 changes: 1 addition & 1 deletion content/integrations/aws-secrets-manager.md
Original file line number Diff line number Diff line change
Expand Up @@ -347,6 +347,6 @@ For complete documentation, see the [configuration page]({{< relref "/tutorials/
| `keystore.aws.secretsmanager.endpoint` | The endpoint for the Secrets Manager service, including the region. For example, `secretsmanager.us-east-1.amazonaws.com`. |
| `keystore.aws.secretsmanager.region` | The AWS region to use for other AWS services. |
| `keystore.aws.secretsmanager.kmskey` | The root KMS Key to use for cryptographic operations. Formerly known as the Customer Master Key. |
| `keystore.aws.secretsmanager.credentials` | The AWS Credentials to use for performing authenticated operations against Secrets Manager and KMS. The specified credentials *must* have the [appropriate permissions](https://min.io/docs/minio/container/operations/server-side-encryption/configure-minio-kes-aws.html#minio-sse-aws-prereq-aws?ref=kes-docs). <br><br> Make entries for both `accesskey` and `secretkey`. The entry for `token` is typically optional. |
| `keystore.aws.secretsmanager.credentials` | The AWS Credentials to use for performing authenticated operations against Secrets Manager and KMS. The specified credentials *must* have the [appropriate permissions](https://docs.min.io/community/minio-object-store/operations/server-side-encryption/configure-minio-kes.html?ref=kes-docs). <br><br> Make entries for both `accesskey` and `secretkey`. The entry for `token` is typically optional. |
{{< /tab >}}
{{< /tabs >}}
16 changes: 8 additions & 8 deletions content/tutorials/kes-for-minio.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ tableOfContents: true
weight: 20
---

This tutorial shows how to setup a KES server and then configure a [MinIO deployment](https://min.io/docs/minio/linux/index.html) as a KES client for object encryption.
This tutorial shows how to setup a KES server and then configure a [MinIO deployment](https://docs.min.io/community/minio-object-store/index.html) as a KES client for object encryption.

```goat
+--------------------------------+
Expand Down Expand Up @@ -131,13 +131,13 @@ For production use, choose any supported KMS implementation that meets your requ

## MinIO Server Setup

The environment variables defined in steps 2-6 below can be defined as part of the MinIO Server [environment variable file](https://min.io/docs/minio/linux/operations/install-deploy-manage/deploy-minio-multi-node-multi-drive.html#create-the-service-environment-file?ref=kes-docs).
The environment variables defined in steps 2-6 below can be defined as part of the MinIO Server [environment variable file](https://docs.min.io/community/minio-object-store/operations/deployments/baremetal-deploy-minio-on-redhat-linux.html#review-the-systemd-service-file?ref=kes-docs).

1. Install MinIO

You can either download a [static binary](https://min.io/download) or follow the [MinIO Quickstart Guide](https://min.io/docs/minio/linux/index.html).
You can either download a [static binary](https://min.io/download) or follow the [MinIO Quickstart Guide](https://docs.min.io/community/minio-object-store/operations/deployments/baremetal-deploy-minio-server.html).

For more detailed instructions on setting up a MinIO Server on other topologies, such as with multiple drives or multiple nodes, see the [installation documentation](https://min.io/docs/minio/linux/operations/installation.html?ref=kes-docs).
For more detailed instructions on setting up a MinIO Server on other topologies, such as with multiple drives or multiple nodes, see the [installation documentation](https://docs.min.io/community/minio-object-store/operations/deployments/baremetal-deploy-minio-on-ubuntu-linux.html?ref=kes-docs).

Select the tab for your operating system for an OS-specific quickstart.

Expand Down Expand Up @@ -207,11 +207,11 @@ The environment variables defined in steps 2-6 below can be defined as part of t
## Encrypt Bucket

Enable server-side encryption on a specific bucket using the [`PutBucketEncryption`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html) S3 API.
This can be done with the [MinIO Client](https://min.io/docs/minio/linux/reference/minio-mc.html).
This can be done with the [MinIO Client](https://docs.min.io/community/minio-object-store/reference/minio-mc.html).

1. Create Key

For a full reference, see the [`mc admin kms key` documentation](https://min.io/docs/minio/linux/reference/minio-mc-admin/mc-admin-kms-key.html).
For a full reference, see the [`mc admin kms key` documentation](https://docs.min.io/community/minio-object-store/reference/minio-mc-admin/mc-admin-kms-key.html).

```sh {.copy}
mc admin kms key create <alias> minio-key-name
Expand All @@ -221,7 +221,7 @@ This can be done with the [MinIO Client](https://min.io/docs/minio/linux/referen

2. Configure Bucket

Add a server-side encryption configuration to your bucket with [`mc encrypt set`](https://min.io/docs/minio/linux/reference/minio-mc/mc-encrypt-set.html).
Add a server-side encryption configuration to your bucket with [`mc encrypt set`](https://docs.min.io/community/minio-object-store/reference/minio-mc/mc-encrypt-set.html).

For example:

Expand All @@ -233,6 +233,6 @@ This can be done with the [MinIO Client](https://min.io/docs/minio/linux/referen

## References

- [MinIO Encryption](https://min.io/docs/minio/linux/operations/server-side-encryption.html)
- [MinIO Encryption](https://docs.min.io/community/minio-object-store/operations/server-side-encryption.html)
- [Server API Doc]({{< relref "server-api" >}})
- [Go SDK Doc](https://pkg.go.dev/github.com/minio/kes)