func (sys *BucketSSEConfigSys) Get(bucket string) (*sse.BucketSSEConfig, error) {
	sseCfg, _, err := globalBucketMetadataSys.GetSSEConfig(bucket)
	return sseCfg, err
}

// validateBucketSSEConfig parses bucket encryption configuration and validates if it is supported by MinIO.
func validateBucketSSEConfig(r io.Reader) (*sse.BucketSSEConfig, error) {
	encConfig, err := sse.ParseBucketSSEConfig(r)
	if err != nil {
		return nil, err
	}

-hook-creation {{- with .Values.postJob.annotations }} {{- toYaml . | nindent 4 }} {{- end }} spec: template: metadata: labels: app: {{ template "minio.name" . }}-job release: {{ .Release.Name }} {{- if .Values.podLabels }} {{- toYaml .Values.podLabels | nindent 8 }} {{- end }} {{- if .Values.postJob.podAnnotations }} annotations: {{- toYaml .Values.postJob.podAnnotations | nindent 8 }} {{- end }} spec: restartPolicy: OnFailure {{- include "minio.imagePullSecrets" . | nindent 6 }} {{- if .Values.nodeSelector...

-hook-creation {{- with .Values.postJob.annotations }} {{- toYaml . | nindent 4 }} {{- end }} spec: template: metadata: labels: app: {{ template "minio.name" . }}-job release: {{ .Release.Name }} {{- if .Values.podLabels }} {{- toYaml .Values.podLabels | nindent 8 }} {{- end }} {{- if .Values.postJob.podAnnotations }} annotations: {{- toYaml .Values.postJob.podAnnotations | nindent 8 }} {{- end }} spec: restartPolicy: OnFailure {{- include "minio.imagePullSecrets" . | indent 6 }} {{- if .Values.nodeSelector...

-hook-creation {{- with .Values.postJob.annotations }} {{- toYaml . | nindent 4 }} {{- end }} spec: template: metadata: labels: app: {{ template "minio.name" . }}-job release: {{ .Release.Name }} {{- if .Values.podLabels }} {{- toYaml .Values.podLabels | nindent 8 }} {{- end }} {{- if .Values.postJob.podAnnotations }} annotations: {{- toYaml .Values.postJob.podAnnotations | nindent 8 }} {{- end }} spec: restartPolicy: OnFailure {{- include "minio.imagePullSecrets" . | indent 6 }} {{- if .Values.nodeSelector...

 { { - with .Values.postJob.annotations } } { { toYaml . | indent 4 } } { { - end } } spec: template: metadata: labels: app: { { template "minio.name" . } }-job release: { { .Release.Name } } { { - if .Values.podLabels } } { { toYaml .Values.podLabels | indent 8 } } { { - end } } { { - if .Values.postJob.podAnnotations } } annotations: { { toYaml .Values.postJob.podAnnotations | indent 8 } } { { - end } } spec: restartPolicy: OnFailure { { - include "minio.imagePullSecrets" . | indent 6 } } { { -...

```
mc encrypt set sse-s3 myminio/bucket/
```

Verify if MinIO has `sse-s3` enabled

```
mc encrypt info myminio/bucket/
Auto encryption 'sse-s3' is enabled
```

### Using environment (not-recommended)

//     -   SealedKey <- metadata
//     -   KeyEncKey := HMAC-SHA256(ClientKey, IV || 'SSE-C' || 'DAREv2-HMAC-SHA256' || bucket || '/' || object)
//     -   ObjectKey := DAREv2_Dec(KeyEncKey, SealedKey)
//     - object_data := DAREv2_Dec(ObjectKey, enc_object_data)
//     Output: object_data
//
// ## SSE-S3
//
// SSE-S3 can use either a master key or a KMS as root-of-trust.

Whether you are planning to use Kubernetes StatefulSet or Kubernetes Deployment, the steps remain the same.

If you're using certificates provided by a CA, add the below section in your yaml file under `spec.volumes[]`

```yaml
    volumes:
      - name: secret-volume
        secret:
          secretName: tls-ssl-minio
          items:
          - key: public.crt
            path: public.crt

eation {{- with .Values.makeBucketJob.annotations }} {{ toYaml . | indent 4 }} {{- end }} spec: template: metadata: labels: app: {{ template "minio.name" . }}-job release: {{ .Release.Name }} {{- if .Values.podLabels }} {{ toYaml .Values.podLabels | indent 8 }} {{- end }} {{- if .Values.makeBucketJob.podAnnotations }} annotations: {{ toYaml .Values.makeBucketJob.podAnnotations | indent 8 }} {{- end }} spec: restartPolicy: OnFailure {{- include "minio.imagePullSecrets" . | indent 6 }} {{- if .Values.nodeSelector...

eation {{- with .Values.makeBucketJob.annotations }} {{ toYaml . | indent 4 }} {{- end }} spec: template: metadata: labels: app: {{ template "minio.name" . }}-job release: {{ .Release.Name }} {{- if .Values.podLabels }} {{ toYaml .Values.podLabels | indent 8 }} {{- end }} {{- if .Values.makeBucketJob.podAnnotations }} annotations: {{ toYaml .Values.makeBucketJob.podAnnotations | indent 8 }} {{- end }} spec: restartPolicy: OnFailure {{- include "minio.imagePullSecrets" . | indent 6 }} {{- if .Values.nodeSelector...