Function buildSSEConfig

tempodb/backend/s3/s3.go:803–833

(cfg *Config)

}

func buildSSEConfig(cfg *Config) (encrypt.ServerSide, error) {
	switch cfg.SSE.Type {
	case "":
		return nil, nil
	case SSEKMS:
		if cfg.SSE.KMSKeyID == "" {
			return nil, errors.New("KMSKeyID is missing")
		}

		encryptionCtx, err := parseKMSEncryptionContext(cfg.SSE.KMSEncryptionContext)
		if err != nil {
			return nil, err
		}
		if encryptionCtx == nil {
			// To overcome a limitation in Minio which checks interface{} == nil.
			return encrypt.NewSSEKMS(cfg.SSE.KMSKeyID, nil)
		}
		return encrypt.NewSSEKMS(cfg.SSE.KMSKeyID, encryptionCtx)

	case SSES3:
		return encrypt.NewSSE(), nil
	case SSEC:
		key := cfg.SSE.CustomerEncryptionKey.String()
		if key == "" {
			return nil, errors.New("SSE-C EncryptionKey is missing")
		}
		return encrypt.NewSSEC([]byte(key))
	default:
		return nil, errUnsupportedSSEType
	}
}