Require encryption for PostgreSQL backups

2026-10-16 17:03:41 +00:00
parent 1f26627488
commit 9b5dff602a
1 changed files with 4 additions and 0 deletions
@@ -23,9 +23,13 @@ spec:
        key: AWS_REGION
    wal:
      compression: gzip
+      # Require Backblaze's S3-compatible SSE-B2 encryption rather than
+      # relying only on the bucket's default encryption policy.
+      encryption: AES256
      maxParallel: 2
    data:
      compression: gzip
+      encryption: AES256
      jobs: 2
  # Backblaze implements the S3 API but does not require every optional AWS
  # checksum behavior. These settings avoid incompatible optional checksums.