Grot (@grafanabot)
884b573c0b
* CLI: Adjust 're-encrypt-data-keys' command
* CLI: Adjust 're-encrypt' command
* Multiple improvements on re-encrypt secrets migration
* Another bunch of code improvements
* Lint fixes
(cherry picked from commit e6a85826e9)
Co-authored-by: Joan López de la Franca Beltran <5459617+joanlopez@users.noreply.github.com>
19 lines
512 B
Go
19 lines
512 B
Go
package secretsmigrations
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/grafana/grafana/pkg/cmd/grafana-cli/runner"
|
|
"github.com/grafana/grafana/pkg/cmd/grafana-cli/utils"
|
|
"github.com/grafana/grafana/pkg/services/featuremgmt"
|
|
)
|
|
|
|
func ReEncryptDEKS(_ utils.CommandLine, runner runner.Runner) error {
|
|
if !runner.Features.IsEnabled(featuremgmt.FlagEnvelopeEncryption) {
|
|
logger.Warn("Envelope encryption is not enabled, quitting...")
|
|
return nil
|
|
}
|
|
|
|
return runner.SecretsService.ReEncryptDataKeys(context.Background())
|
|
}
|