// Copyright (c) 2015-2021 MinIO, Inc. // // This file is part of MinIO Object Storage stack // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Affero General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Affero General Public License for more details. // // You should have received a copy of the GNU Affero General Public License // along with this program. If not, see . package cmd import ( "context" "fmt" "github.com/fatih/color" "github.com/minio/cli" json "github.com/minio/colorjson" "github.com/minio/mc/pkg/probe" "github.com/minio/pkg/console" ) var encryptInfoCmd = cli.Command{ Name: "info", Usage: "show bucket encryption status", Action: mainEncryptInfo, OnUsageError: onUsageError, Before: setGlobalsFromContext, Flags: globalFlags, CustomHelpTemplate: `NAME: {{.HelpName}} - {{.Usage}} USAGE: {{.HelpName}} TARGET FLAGS: {{range .VisibleFlags}}{{.}} {{end}} EXAMPLES: 1. Display bucket encryption status for bucket "mybucket". {{.Prompt}} {{.HelpName}} myminio/mybucket `, } // checkversionInfoSyntax - validate all the passed arguments func checkEncryptInfoSyntax(ctx *cli.Context) { if len(ctx.Args()) != 1 { showCommandHelpAndExit(ctx, 1) // last argument is exit code } } type encryptInfoMessage struct { Op string `json:"op"` Status string `json:"status"` URL string `json:"url"` Encryption struct { Algorithm string `json:"algorithm,omitempty"` KeyID string `json:"keyId,omitempty"` } `json:"encryption,omitempty"` } func (v encryptInfoMessage) JSON() string { v.Status = "success" jsonMessageBytes, e := json.MarshalIndent(v, "", " ") fatalIf(probe.NewError(e), "Unable to marshal into JSON.") return string(jsonMessageBytes) } func (v encryptInfoMessage) String() string { msg := "" switch v.Encryption.Algorithm { case "": msg = fmt.Sprintf("Auto encryption is not enabled for %s ", v.URL) default: msg = "Auto encryption 'sse-s3' is enabled" } if v.Encryption.KeyID != "" { msg = fmt.Sprintf("Auto encrytion 'sse-kms' is enabled with KeyID: %s", v.Encryption.KeyID) } return console.Colorize("encryptInfoMessage", msg) } func mainEncryptInfo(cliCtx *cli.Context) error { ctx, cancelEncryptInfo := context.WithCancel(globalContext) defer cancelEncryptInfo() console.SetColor("encryptInfoMessage", color.New(color.FgGreen)) checkEncryptInfoSyntax(cliCtx) // Get the alias parameter from cli args := cliCtx.Args() aliasedURL := args.Get(0) // Create a new Client client, err := newClient(aliasedURL) fatalIf(err, "Unable to initialize connection.") algorithm, keyID, e := client.GetEncryption(ctx) fatalIf(e, "Unable to get encryption info") msg := encryptInfoMessage{ Op: cliCtx.Command.Name, Status: "success", URL: aliasedURL, } msg.Encryption.Algorithm = algorithm msg.Encryption.KeyID = keyID printMsg(msg) return nil }