future/encryption.yaml

# FUTURE / NOT IN validate-examples — under examples/future/ (see examples/README.md).
# Client-side streaming encryption requires `features.encryption=true` (and envelope mode needs
# `features.envelope_encryption=true`). Copy patterns into a root example or real job with gates enabled.

api_version: iobackup.io/v1
kind: BackupJob
metadata:
  job_id: example-encryption-direct
  name: Encryption direct (env key ref)
  labels:
    example.iobackup.io/kind: future
spec:
  enabled: false
  operation:
    type: backup
  tasks:
    - task_id: t1
      source:
        type: filesystem
        config:
          paths:
            - /var/tmp/iobackup-future-placeholder
      backup:
        encryption:
          enabled: true
          key_ref: "env:IOBACKUP_AES256_KEY"
      destination:
        type: local
        config:
          path: /var/tmp/iobackup-future-artifacts