Joan López de la Franca Beltran
b2655750e8
* Encryption: Add support for data keys re-encryption * Add tests for data keys re-encryption * Update code after refactorings Co-authored-by: Leonard Gram <leo@xlson.com>
20 lines
569 B
Go
20 lines
569 B
Go
package secretsmigrations
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/grafana/grafana/pkg/cmd/grafana-cli/logger"
|
|
"github.com/grafana/grafana/pkg/cmd/grafana-cli/runner"
|
|
"github.com/grafana/grafana/pkg/cmd/grafana-cli/utils"
|
|
"github.com/grafana/grafana/pkg/services/featuremgmt"
|
|
)
|
|
|
|
func ReEncryptDEKS(_ utils.CommandLine, runner runner.Runner) error {
|
|
if !runner.Features.IsEnabled(featuremgmt.FlagEnvelopeEncryption) {
|
|
logger.Warn("Envelope encryption is not enabled, quitting...")
|
|
return nil
|
|
}
|
|
|
|
return runner.SecretsService.ReEncryptDataKeys(context.Background())
|
|
}
|