New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
PYTHON-3517 Add documentation for on-demand KMS providers #1113
Conversation
doc/changelog.rst
Outdated
|
||
Version 4.4 brings a number of improvements including: | ||
|
||
- Added support for :ref:`CSFLE on-demand credentials` for cloud KMS providers. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this can go into the 4.3.3 release if we market it as "documented support" instead of "added support". We can say that it requires pymongocrypt>=1.4. I think this makes more sense because it will be supported by older versions of pymongo too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sounds good
doc/changelog.rst
Outdated
@@ -4,7 +4,7 @@ Changelog | |||
Changes in Version 4.3.3 | |||
------------------------ | |||
|
|||
Version 4.3.3 fixes a number of bugs: | |||
Version 4.3.3 documents supportfor :ref:`CSFLE on-demand credentials` for cloud KMS providers, and fixes the following bugs: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
supportfor -> support for
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
fixed
doc/examples/encryption.rst
Outdated
|
||
from pymongo import MongoClient | ||
from pymongo.encryption import ClientEncryption | ||
from pymongo.encryption_options import AutoEncryptionOpts |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
AutoEncryptionOpts is imported but never used in these examples. It would be good to add one AutoEncryptionOpts example.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
from pymongo.encryption_options import AutoEncryptionOpts | ||
client = MongoClient() | ||
client_encryption = ClientEncryption( | ||
kms_providers={"aws": {}}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A comment on these lines would be good to highlight that the empty dict means creds are looked up on demand.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
No description provided.