Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PYTHON-3517 Add documentation for on-demand KMS providers #1113

Merged
merged 3 commits into from Nov 11, 2022

Conversation

blink1073
Copy link
Member

No description provided.


Version 4.4 brings a number of improvements including:

- Added support for :ref:`CSFLE on-demand credentials` for cloud KMS providers.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this can go into the 4.3.3 release if we market it as "documented support" instead of "added support". We can say that it requires pymongocrypt>=1.4. I think this makes more sense because it will be supported by older versions of pymongo too.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds good

@@ -4,7 +4,7 @@ Changelog
Changes in Version 4.3.3
------------------------

Version 4.3.3 fixes a number of bugs:
Version 4.3.3 documents supportfor :ref:`CSFLE on-demand credentials` for cloud KMS providers, and fixes the following bugs:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

supportfor -> support for

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed


from pymongo import MongoClient
from pymongo.encryption import ClientEncryption
from pymongo.encryption_options import AutoEncryptionOpts
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AutoEncryptionOpts is imported but never used in these examples. It would be good to add one AutoEncryptionOpts example.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

from pymongo.encryption_options import AutoEncryptionOpts
client = MongoClient()
client_encryption = ClientEncryption(
kms_providers={"aws": {}},
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A comment on these lines would be good to highlight that the empty dict means creds are looked up on demand.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@blink1073 blink1073 merged commit fcb1151 into mongodb:master Nov 11, 2022
@blink1073 blink1073 deleted the PYTHON-3517 branch November 11, 2022 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants