Encryption: Enable envelope encryption by default (#49301)

* Encryption: Enable envelope encryption by default

* Stop relying on feature toggles from settings (deprecated)

* Database encryption docs (envelope encryption)

* Remove deprecated (and no longer used) FT

* Apply suggestions from code review

Co-authored-by: Tania <yalyna.ts@gmail.com>
This commit is contained in:
Joan López de la Franca Beltran
2022-05-24 10:34:47 +02:00
committed by GitHub
parent 521b0202e2
commit 3e4b4dba46
12 changed files with 107 additions and 46 deletions

View File

@@ -14,9 +14,9 @@ var (
State: FeatureStateBeta,
},
{
Name: "envelopeEncryption",
Description: "encrypt secrets",
State: FeatureStateBeta,
Name: "disableEnvelopeEncryption",
Description: "Disable envelope encryption (emergency only)",
State: FeatureStateStable,
},
{
Name: "httpclientprovider_azure_auth",

View File

@@ -11,9 +11,9 @@ const (
// Use cue schema to remove values that will be applied automatically
FlagTrimDefaults = "trimDefaults"
// FlagEnvelopeEncryption
// encrypt secrets
FlagEnvelopeEncryption = "envelopeEncryption"
// FlagDisableEnvelopeEncryption
// Disable envelope encryption (emergency only)
FlagDisableEnvelopeEncryption = "disableEnvelopeEncryption"
// FlagHttpclientproviderAzureAuth
// Experimental. Allow datasources to configure Azure authentication directly via JsonData