Repository navigation

feat(s3): support SSE-C customer-provided keys - #1017

Merged

leonardoce merged 11 commits into

cloudnative-pg:mainfrom

schaurian:feat/s3-sse-c

Oct 27, 2026

Merged

feat(s3): support SSE-C customer-provided keys#1017
leonardoce merged 11 commits into
cloudnative-pg:mainfrom
schaurian:feat/s3-sse-c

Commits on Oct 27, 2026
- feat: support S3 SSE-C (customer-provided encryption keys)
  
  authored and
  leonardoce
  committed
  a341e3d
- fix: grant the instance role access to the SSE-C key secret
  
  authored and
  leonardoce
  committed
  addb8fb
- fix: use a separate SSE-C key file for each object store
  
  armru
  authored and
  leonardoce
  committed
  54c498f
- feat: reject ObjectStores combining SSE-C with bucket-managed encryption
  
  armru
  authored and
  leonardoce
  committed
  84970c2
- test: cover SSE-C with a different key for each object store
  
  armru
  authored and
  leonardoce
  committed
  7cd2d0c
- fix: let object stores with an SSE-C key start WAL archiving
  
  armru
  authored and
  leonardoce
  committed
  31e36a8
- refactor: list the secrets with the barman-cloud helper
  
  mnencia
  authored and
  leonardoce
  committed
  69a0c24
- chore: regenerate the CRD and the manifest
  
  mnencia
  authored and
  leonardoce
  committed
  2e8c536
- chore: use the barman-cloud commit that adds SSE-C
  
  mnencia
  authored and
  leonardoce
  committed
  4df81f7
- docs: tidy the SSE-C section
  
  mnencia
  authored and
  leonardoce
  committed
  ddbaadb
- fix: satisfy staticcheck QF1008 in the role rules
  
  mnencia
  authored and
  leonardoce
  committed
  7d7c9a4