Bruno
f8cd7049e8
Secrets: garbage collection ( #110247 )
...
* clean up older secret versions
* start gargbage collection worker as background service
* make gen-go
* fix typo
* make update-workspace
* undo go mod changes
* undo go work sum changes
* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* default gc_worker_batch_size to 1 minute
* fix typo
* fix typo
* add test to ensure cleaning up secure values is idempotent
* make gen-go
* make update-workspace
* undo go.mod and .sum changes
* undo enterprise imports
---------
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-09-02 11:11:01 -03:00
Matheus Macabu
fc117afebc
Secrets: Provide grpc and local inline secure value client ( #109179 )
...
* TestUtils: Add helper to create certs
* InlineSecureValue: Move to its own package rather than service
* Settings: Rename decrypt server configs to grpc prefixed as it is more generic
* InlineSecureValue: Add gRPC client
* InlineSecureValue: Add service provider grpc/local depending on setting.Cfg
* Wire: Add ProvideInlineSecureValueService to basic wireset
* InlineSecureValue: Re-export in root secret pkg and generate mocks for interface
* Settings: Unify decrypt+inline setting into generic grpc client
2025-08-06 09:04:55 +02:00
Stephanie Hingtgen
ef9f9c2d8e
Secrets service: Allow decrypt through gRPC connection ( #108365 )
2025-07-29 07:51:37 -05:00
Michael Mandrus
ab51794bdb
SecretsManager: Unify KMS across OSS and Enterprise ( #108085 )
...
* everything is compiling
* tests passing
* remove used object
* write a test for secret key upgrades
* misc cleanup
* clean up some wording
* lint issues
* fix a typo
* import hashicorp dependency explicitly
* simplify oss kmsprovider package structure
* consolidate current provider and available providers
* add a new manager configuration test
* fix hashivault import
* fix import issue
* fix unit tests
* Update go.mod
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
---------
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-15 14:39:20 -04:00
Dana Axinte
a59ec345c2
SecretsManager: Introduce metrics and logs ( #107582 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-03 17:32:18 +01:00
Dana Axinte
4d8678c7f2
SecretsManager: Add base encryption manager ( #107562 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-03 11:29:14 +01:00
Matheus Macabu
c90e2e8e5e
SecretsManager: Add (en/de)cryption packages ( #104923 )
...
Merging the code as-is from the feature branch: secret-service/feature-branch
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
Co-authored-by: Leandro Deveikis <leandro.deveikis@gmail.com >
Co-authored-by: Mariell Hoversholm <mariell.hoversholm@grafana.com >
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-05-05 15:26:52 +02:00
