Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEAT] Encrypt swift data at rest #103

Open
kayrus opened this issue Jan 23, 2024 · 0 comments
Open

[FEAT] Encrypt swift data at rest #103

kayrus opened this issue Jan 23, 2024 · 0 comments

Comments

@kayrus
Copy link
Contributor

kayrus commented Jan 23, 2024

Is your feature request related to a problem? Please describe.

k8s resources backups are stored in plain format in Swift, this is not secure if you backup secrets.

Describe the solution you'd like

Velero doesn't support encryption (see), but it supports restic for the file system backup (FSB).
I propose a feature to encrypt the data before it's stored in swift. A proposed encryption method should correspond to the one used in restic

Restic's license is BSD 2-clause, therefore it should be safe (this repo has compatible MIT license) to use it's source code for the encryption.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant