concourse-up By default no database encryption

By default no database encryption

Open analytically opened this issue 8 years ago • 7 comments

Using 0.5.1, by default my Concourse DB isn't encrypted ...

Oct 12 '17 15:10 analytically

Have raised a bug for this https://www.pivotaltracker.com/story/show/152474235

Nov 01 '17 13:11 danyoung

Can you confirm if it the database itself or RDS which isn't encrypted? Encryption within RDS is currently not enabled.

Nov 30 '17 12:11 danyoung

Ah my issue was regarding RDS encryption.

Nov 30 '17 12:11 analytically

Ok, got it. Feature request, not a bug :) We'll add this to the icebox along with a recent request for EBS encryption.

Nov 30 '17 12:11 danyoung

Story for this feature in the icebox: https://www.pivotaltracker.com/story/show/152474235

May 03 '18 11:05 danyoung

adding some support for this issue... would love to see RDS and EBS encrypted BY DEFAULT.

Nov 06 '18 18:11 dkalemba

Hello @dkalemba,

Thank you for reaching out and contributing to this conversation.

When it comes to EBS volumes, we base our encryption on this documentation: https://bosh.io/docs/aws-cpi/
RDS encryption has been suggested to us in the past by other users, and we are currently looking into this; watch this space!

Thanks, Best.

Eva

Nov 07 '18 11:11 evadinckel