--replicate "existing-objects,delete,delete-marker,replica-metadata-sync"
sleep 1

echo "adding replication rule for b -> a : ${remote_arn}"
./mc replicate add siteb/bucket/ \
	--remote-bucket http://minio:minio123@127.0.0.1:9001/bucket \
	--replicate "existing-objects,delete,delete-marker,replica-metadata-sync"
sleep 1

echo "adding replication rule for a -> c : ${remote_arn}"

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

et.enabled }} apiVersion: policy/v1beta1 kind: PodDisruptionBudget metadata: name: minio namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} spec: maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} selector: matchLabels: app: {{ template "minio.name" . }} {{- end }} minio/templates/post-install-create-bucket-job.yaml {{- if .Values.buckets }} apiVersion: batch/v1 kind: Job metadata: name: {{ template "minio.fullname" . }}-make-bucket-job namespace:...

- `context_values`: are values like the bucket and object name and other information which should be cryptographically bound to the KEK.

To summarize for any encrypted object there exists (at least) three different keys: