ClickHouse/tests/integration/test_encrypted_disk/configs/storage.xml

<clickhouse>
    <storage_configuration>
        <disks>
            <disk_s3>
                <type>s3</type>
                <endpoint>http://minio1:9001/root/data/</endpoint>
                <access_key_id>minio</access_key_id>
                <secret_access_key>minio123</secret_access_key>
            </disk_s3>
            <disk_local>
                <type>local</type>
                <path>/disk/</path>
            </disk_local>
            <disk_s3_encrypted>
                <type>encrypted</type>
                <disk>disk_s3</disk>
                <key>1234567812345678</key>
                <path>encrypted/</path>
            </disk_s3_encrypted>
            <disk_s3_encrypted_default_path>
                <type>encrypted</type>
                <disk>disk_s3</disk>
                <key>1234567812345678</key>
            </disk_s3_encrypted_default_path>
            <s3_cache>
                <type>cache</type>
                <disk>disk_s3</disk>
                <path>s3_cache/</path>
                <max_size>1Gi</max_size>
            </s3_cache>
            <encrypted_s3_cache>
                <type>encrypted</type>
                <disk>s3_cache</disk>
                <key>1234567812345678</key>
            </encrypted_s3_cache>
            <disk_local_encrypted>
                <type>encrypted</type>
                <disk>disk_local</disk>
                <path>encrypted/</path>
                <key>1234567812345678</key>
            </disk_local_encrypted>
            <disk_local_encrypted2>
                <type>encrypted</type>
                <disk>disk_local</disk>
                <path>encrypted2/</path>
                <key>1234567812345678</key>
            </disk_local_encrypted2>
            <disk_local_encrypted_key192b>
                <type>encrypted</type>
                <disk>disk_local</disk>
                <path>encrypted_key192b/</path>
                <algorithm>aes_192_ctr</algorithm>
                <key_hex>109105c600c12066f82f1a4dbb41a08e4A4348C8387ADB6A</key_hex>
            </disk_local_encrypted_key192b>
        </disks>
        <policies>
            <encrypted_policy>
                <volumes>
                    <main>
                        <disk>disk_local_encrypted</disk>
                    </main>
                </volumes>
            </encrypted_policy>
            <encrypted_policy_key192b>
                <volumes>
                    <main>
                        <disk>disk_local_encrypted_key192b</disk>
                    </main>
                </volumes>
            </encrypted_policy_key192b>
            <local_policy>
                <volumes>
                    <main>
                        <disk>disk_local</disk>
                    </main>
                    <external>
                        <disk>disk_local_encrypted</disk>
                        <disk>disk_local_encrypted2</disk>
                        <disk>disk_local_encrypted_key192b</disk>
                    </external>
                </volumes>
            </local_policy>
            <s3_policy>
                <volumes>
                    <main>
                        <disk>disk_s3</disk>
                    </main>
                    <external>
                        <disk>disk_s3_encrypted</disk>
                    </external>
                </volumes>
            </s3_policy>
            <s3_encrypted_default_path>
                <volumes>
                    <main>
                        <disk>disk_s3_encrypted_default_path</disk>
                    </main>
                </volumes>
            </s3_encrypted_default_path>
            <s3_encrypted_cache_policy>
                <volumes>
                    <main>
                        <disk>encrypted_s3_cache</disk>
                    </main>
                </volumes>
            </s3_encrypted_cache_policy>
         </policies>
    </storage_configuration>

    <temporary_data_in_cache>s3_cache</temporary_data_in_cache>
    <allow_remove_stale_moving_parts>true</allow_remove_stale_moving_parts>
</clickhouse>