feat(storage): enable at-rest encryption on storage container (#963)

cryostatio · Oct 17, 2024 · a04b5f2 · a04b5f2
1 parent c950764
commit a04b5f2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/internal/controllers/common/resource_definitions/resource_definitions.go b/internal/controllers/common/resource_definitions/resource_definitions.go
@@ -1331,6 +1331,10 @@ func NewStorageContainer(cr *model.CryostatInstance, imageTag string, tls *TLSCo
 			Name:  "IP_BIND",
 			Value: "0.0.0.0",
 		},
+		{
+			Name:  "REST_ENCRYPTION_ENABLE",
+			Value: "1",
+		},
 	}
 
 	mounts := []corev1.VolumeMount{

diff --git a/internal/test/resources.go b/internal/test/resources.go
@@ -1632,6 +1632,10 @@ func (r *TestResources) NewStorageEnvironmentVariables() []corev1.EnvVar {
 			Name:  "IP_BIND",
 			Value: "0.0.0.0",
 		},
+		{
+			Name:  "REST_ENCRYPTION_ENABLE",
+			Value: "1",
+		},
 		{
 			Name: "CRYOSTAT_SECRET_KEY",
 			ValueFrom: &corev1.EnvVarSource{