Loki S3 with SSE-C

[hatrena]

Currently, the valid S3 SSE options in Loki are SSE-KMS and SSE-S3. is there any blocker or limitation to support SSE-C?

[itsraghurama]

I wonder why such a critical feature is not available.

[rosieks]

@JStickler Can this issue be changed from question to feature request. People want to have this feature rather than know why it's not implenented

[hatrena]

As we could not wait for this implementation, we have built our own golang proxy as a Client-Side Encryption (with AES). Basically, it encrypts all data from Loki before landing on S3-compatible storage and decrypts all data from S3 before reaching out to Loki. It also supports Mimir.

[Stogas]

@hatrena could you.. open source that proxy? 😅

[hatrena]

@hatrena could you.. open source that proxy? 😅

The proxy can be open-sourced if it does not violate our company principles (needs to be internally checked) and if there are public requests for this proxy.

[Stogas]

@hatrena we're interested, and would greatly appreciate it so we don't have to duplicate efforts. We'll wait for your internal check! Thanks in advance!