Argo Workflows · Schema
io.argoproj.workflow.v1alpha1.S3EncryptionOptions
S3EncryptionOptions used to determine encryption options during s3 operations
CNCFContainersData ProcessingKubernetesMachine LearningOpen SourceWorkflow Engine
Properties
| Name | Type | Description |
|---|---|---|
| enableEncryption | boolean | EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used |
| kmsEncryptionContext | string | KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information |
| kmsKeyId | string | KMSKeyId tells the driver to encrypt the object using the specified KMS Key. |
| serverSideCustomerKeySecret | object | ServerSideCustomerKeySecret tells the driver to encrypt the output artifacts using SSE-C with the specified secret. |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/argo-workflows/refs/heads/main/json-schema/argo-workflows-io-argoproj-workflow-v1alpha1-s3-encryption-options-schema.json",
"title": "io.argoproj.workflow.v1alpha1.S3EncryptionOptions",
"description": "S3EncryptionOptions used to determine encryption options during s3 operations",
"type": "object",
"properties": {
"enableEncryption": {
"description": "EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used",
"type": "boolean"
},
"kmsEncryptionContext": {
"description": "KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information",
"type": "string"
},
"kmsKeyId": {
"description": "KMSKeyId tells the driver to encrypt the object using the specified KMS Key.",
"type": "string"
},
"serverSideCustomerKeySecret": {
"description": "ServerSideCustomerKeySecret tells the driver to encrypt the output artifacts using SSE-C with the specified secret.",
"$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector"
}
}
}