Secrets: encryption encryption storage uses versioning (#108036)

* Secrets: delete unused FakeKeeper

* Secrets: encrypted value storage stores versions

* add version to span

* trigger build

* remove ineffectual assignment

* lint

* drop secret_encrypted_value.uid / add name and version columns

pkg/storage/secret/encryption/data/encrypted_value_create.sql

@@ -1,12 +1,14 @@
 INSERT INTO {{ .Ident "secret_encrypted_value" }} (
-  {{ .Ident "uid" }},
   {{ .Ident "namespace" }},
+  {{ .Ident "name" }},
+  {{ .Ident "version" }},
   {{ .Ident "encrypted_data" }},
   {{ .Ident "created" }},
   {{ .Ident "updated" }}
 ) VALUES (
-  {{ .Arg .Row.UID }},
   {{ .Arg .Row.Namespace }},
+  {{ .Arg .Row.Name }},
+  {{ .Arg .Row.Version }},
   {{ .Arg .Row.EncryptedData }},
   {{ .Arg .Row.Created }},
   {{ .Arg .Row.Updated }}

pkg/storage/secret/encryption/data/encrypted_value_delete.sql

@@ -1,4 +1,6 @@
 DELETE FROM {{ .Ident "secret_encrypted_value" }}
-WHERE {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
-  {{ .Ident "uid" }}      = {{ .Arg .UID }}
+WHERE 
+  {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
+  {{ .Ident "name" }}      = {{ .Arg .Name }} AND
+  {{ .Ident "version" }}   = {{ .Arg .Version }}
 ;

pkg/storage/secret/encryption/data/encrypted_value_read.sql

@@ -1,11 +1,14 @@
 SELECT
-  {{ .Ident "uid" }},
   {{ .Ident "namespace" }},
+  {{ .Ident "name" }},
+  {{ .Ident "version" }},
   {{ .Ident "encrypted_data" }},
   {{ .Ident "created" }},
   {{ .Ident "updated" }}
 FROM
   {{ .Ident "secret_encrypted_value" }}
-WHERE {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
-  {{ .Ident "uid" }} = {{ .Arg .UID }}
+WHERE 
+  {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
+  {{ .Ident "name" }} = {{ .Arg .Name }} AND
+  {{ .Ident "version" }} = {{ .Arg .Version }}
 ;

pkg/storage/secret/encryption/data/encrypted_value_update.sql

@@ -3,6 +3,8 @@ UPDATE
 SET
   {{ .Ident "encrypted_data" }} = {{ .Arg .EncryptedData }},
   {{ .Ident "updated" }} = {{ .Arg .Updated }}
-WHERE {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
-  {{ .Ident "uid" }} = {{ .Arg .UID }}
+WHERE 
+  {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
+  {{ .Ident "name" }} = {{ .Arg .Name }} AND
+  {{ .Ident "version" }} = {{ .Arg .Version }}
 ;