Michael Mandrus
cf242def3a
Secrets: Refactor data_key_id out of the encoded secure value payload ( #112077 )
...
* Secrets: Refactor data_key_id out of the encoded secure value payload (#111852 )
* everything compiles
* tests pass
* remove file included by accident
* add entry to gitignore
* some scaffolding for the migration executor
* remove file
* implement and test the migration
* use xkube.Namespace in our interfaces
* add todo
* update wire deps
* add some logs
* fix wire dependency ordering
* create tests to validate error conditions during migrations
* only run the migration as an MT api server
* formatting issues
* change detection of secrets running as MT server
* add todo
* use more specific initializer flags
* make secrets playwright tests work
* set new properties to true by default
* remove developer mode flag
* fix unit tests
2025-10-30 23:04:32 -04:00
Stephanie Hingtgen
ce50f2cf61
Revert "Secrets: Refactor data_key_id out of the encoded secure value payload" ( #112034 )
...
Revert "Secrets: Refactor data_key_id out of the encoded secure value payload…"
This reverts commit acad92864e
2025-10-05 09:53:43 +03:00
Michael Mandrus
acad92864e
Secrets: Refactor data_key_id out of the encoded secure value payload ( #111852 )
...
* everything compiles
* tests pass
* remove file included by accident
* add entry to gitignore
* some scaffolding for the migration executor
* remove file
* implement and test the migration
* use xkube.Namespace in our interfaces
* add todo
* update wire deps
* add some logs
* fix wire dependency ordering
* create tests to validate error conditions during migrations
2025-10-03 15:25:46 -04:00
Peter Štibraný
7fd9ab9481
Replace check for integration tests. ( #110707 )
...
* Replace check for integration tests.
* Revert changes in pkg/tsdb/mysql packages.
* Fix formatting of few tests.
2025-09-08 15:49:49 +02:00
Dana Axinte
b1b9cc43a8
SecretsManager: Adding ability to disable all DEKs ( #108444 )
...
* Adding dek deactivation and rename list dek
* disable data keys from manager
* separate interface and don't use in encryption manager
2025-07-25 17:11:17 +01:00
Matheus Macabu
47abf5f811
Secrets: Clean up unused code ( #108366 )
...
* Secrets: Remove unused tracectx pkg
* Secrets: Remove unused assert pkg
* Secrets: Remove unused encryption interface
* Secrets: Remove unused encryption file/ref
2025-07-21 11:08:49 +02:00
Matheus Macabu
2c4bbf8b1d
Secrets: Reduce amount of feature toggle checks to only app entrypoint ( #108110 )
...
* Secrets: Reduce amount of feature toggle checks to only app entrypoint
* Wire: Fix merge conflict
* Wire: Fix merge conflict
2025-07-16 10:56:59 +02:00
Michael Mandrus and Matheus Macabu
ab51794bdb
SecretsManager: Unify KMS across OSS and Enterprise ( #108085 )
...
* everything is compiling
* tests passing
* remove used object
* write a test for secret key upgrades
* misc cleanup
* clean up some wording
* lint issues
* fix a typo
* import hashicorp dependency explicitly
* simplify oss kmsprovider package structure
* consolidate current provider and available providers
* add a new manager configuration test
* fix hashivault import
* fix import issue
* fix unit tests
* Update go.mod
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
---------
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-15 14:39:20 -04:00
Matheus Macabu
403d6380fa
Secrets: Remove gating with experimental APIs feature toggle ( #108058 )
2025-07-14 17:46:17 +02:00
Dana Axinte and Michael Mandrus
a59ec345c2
SecretsManager: Introduce metrics and logs ( #107582 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-03 17:32:18 +01:00
4d8678c7f2
SecretsManager: Add base encryption manager ( #107562 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-03 11:29:14 +01:00
Matheus Macabu
f32d944b23
Secrets: Add initial tracing instrumentation ( #107513 )
2025-07-02 14:43:36 +02:00
0fccc01ebe
SecretsManager: add data key store ( #107396 )
...
* SecretsManager: Add data key store
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
* SecretsManager: Add wiring of data key store
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
---------
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-06-30 17:17:07 +01:00
c90e2e8e5e
SecretsManager: Add (en/de)cryption packages ( #104923 )
...
Merging the code as-is from the feature branch: secret-service/feature-branch
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com >
Co-authored-by: Mariell Hoversholm <mariell.hoversholm@grafana.com >
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-05-05 15:26:52 +02:00
Michael Mandrus
Stephanie Hingtgen
Peter Štibraný
Dana Axinte
Matheus Macabu
