Encryption: Add support for multiple data keys per day (#47765)

* Add database migrations

* Use short uids as data key ids

* Add support for manual data key rotation

* Fix duplicated mutex unlocks

* Fix migration

* Manage current data keys per name

* Adjust key re-encryption and test

* Modify rename column migration for MySQL compatibility

* Refactor secrets manager and data keys cache

* Multiple o11y adjustments

* Fix stats query

* Apply suggestions from code review

Co-authored-by: Tania <yalyna.ts@gmail.com>

* Fix linter

* Docs: Rotate data encryption keys API endpoint

Co-authored-by: Tania <yalyna.ts@gmail.com>

This commit is contained in:

Joan López de la Franca Beltran

2022-05-23 13:13:55 +02:00

committed by

GitHub

co-authored by

Tania

parent ae8c11bfa4

commit e43879e55d

21 changed files with 498 additions and 170 deletions

									
										pkg/services/secrets/manager/metrics.go
									
		+1
		-1
	
												View File
												
				@@ -25,7 +25,7 @@ var (

							Name:      "encryption_cache_reads_total",

							Help:      "A counter for encryption cache reads",

						},

						[]string{"hit"},

						[]string{"hit", "method"},

					)

				)