Compression FileDecrypt
CertifiedDecrypt a file encrypted with AES-256
Compression FileDecrypt
Decrypt a file encrypted with AES-256
Detects the file format automatically (OpenSSL or KESTRAENC). For OpenSSL files, the iterations property must match the value used at encrypt time.
type: io.kestra.plugin.compress.FileDecryptExamples
id: file_decrypt
namespace: company.team
inputs:
- id: file
type: FILE
tasks:
- id: decrypt
type: io.kestra.plugin.compress.FileDecrypt
from: "{{ inputs.file }}"
password: "{{ secret('ENCRYPTION_PASSWORD') }}"
Installation
Our standard Docker images already include this plugin. If you use a -slim image or another setup, install it with the following command:
kestractl plugins get io.kestra.plugin:plugin-compress --compatible-for $KESTRA_VERSION For kestractl, use your Kestra version with --compatible-for, or specify an exact plugin version.
For Kestra CLI, replace LATEST with a specific version or version range to pin the plugin version.
Properties
from *string
Source file URI
Pebble expression referencing an Internal Storage URI e.g. {{ outputs.mytask.uri }}.
password *string
Password
assets
Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.
io.kestra.core.models.assets.AssetsDeclaration
IGNOREFAILWARNAsset failure behavior
Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.
Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.
The assets consumed as inputs.
io.kestra.core.models.assets.AssetIdentifier
1The assets produced as outputs.
io.kestra.plugin.ee.assets.Dataset
1150{}1150io.kestra.plugin.ee.assets.File
1150{}1150io.kestra.plugin.ee.assets.Table
1150{}1150io.kestra.plugin.ee.assets.VM
1150{}1150io.kestra.core.models.assets.External
1150{}1150io.kestra.core.models.assets.Custom
11501Custom asset type
{}1150iterations integerstring
600000PBKDF2 iteration count
PBKDF2 number of hashing rounds (min 100000, default 600000). Used only by PBKDF2_SHA256 and PBKDF2_SHA512. Ignored for Argon2id (use argon2TimeCost), Scrypt (uses memory only), and when decrypting KESTRAENC files (read from the file header).
Outputs
uri string
uriDecrypted file URI
