community icon indicating copy to clipboard operation
community copied to clipboard

[S3] Configuration of default object lock settings

Open aljoshare opened this issue 2 years ago • 11 comments

Is your feature request related to a problem?

Currently, the S3 operator only supports to enable/disable the object lock for new objects but it doesn't allow to customize the object lock configuration (e.g. the default retention or the default retention mode).

image

Describe the solution you'd like

As a user I would like to be able to customize the default object lock configuration (e.g. set the default retention or the default retention mode) similar to the AWS console:

image

The Terraform provider: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_object_lock_configuration#default_retention).

The AWS CLI: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/s3api/put-object-lock-configuration.html

I would love to see something similar to this:

objectLock:
  enabled: true 
  default:
   retention: 1d // or e.g. 1y
   mode: governance // or compliance

I discussed the topic in Slack and @A-Hilaly suggested that it could be solved by using https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLockConfiguration.html.

Describe alternatives you've considered None

Thank you very much! :heart:

aljoshare avatar Dec 05 '22 15:12 aljoshare

I wonder why there is a "Disable" option in the AWS Console since it's pretty clear that once you enable Object Lock, you cannot disable it....

jaypipes avatar Dec 08 '22 17:12 jaypipes

This is doable, but the whole "cannot disable once enabled" thing will need to be custom coded...

jaypipes avatar Dec 08 '22 17:12 jaypipes

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle stale

ack-bot avatar Mar 08 '23 19:03 ack-bot

/remove-lifecycle stale

aljoshare avatar Mar 13 '23 07:03 aljoshare

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle stale

ack-bot avatar Jun 11 '23 09:06 ack-bot

Stale issues rot after 30d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten. Rotten issues close after an additional 30d of inactivity. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle rotten

ack-bot avatar Jul 11 '23 09:07 ack-bot

Issues go stale after 180d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 60d of inactivity and eventually close. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle stale

ack-bot avatar Jan 07 '24 18:01 ack-bot

Stale issues rot after 60d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten. Rotten issues close after an additional 60d of inactivity. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle rotten

ack-bot avatar Mar 07 '24 19:03 ack-bot

/remove-lifecycle rotten

gecube avatar Mar 14 '24 07:03 gecube