SecretsManager: Adding ability to disable all DEKs (#108444)

* Adding dek deactivation and rename list dek

* disable data keys from manager

* separate interface and don't use in encryption manager
This commit is contained in:
Dana Axinte
2025-07-25 17:11:17 +01:00
committed by GitHub
parent f69f25be5d
commit b1b9cc43a8
11 changed files with 167 additions and 17 deletions
+8
View File
@@ -28,6 +28,7 @@ var (
sqlDataKeyList = mustTemplate("data_key_list.sql")
sqlDataKeyDisable = mustTemplate("data_key_disable.sql")
sqlDataKeyDelete = mustTemplate("data_key_delete.sql")
sqlDataKeyDisableAll = mustTemplate("data_key_disable_all.sql")
)
// TODO: Move this to a common place so that all stores can use
@@ -140,3 +141,10 @@ type deleteDataKey struct {
}
func (r deleteDataKey) Validate() error { return nil }
type disableAllDataKeys struct {
sqltemplate.SQLTemplate
Updated time.Time
}
func (r disableAllDataKeys) Validate() error { return nil }