Привет, можете подсказать чем грозит это обновление https://www.vaultproject.io/docs/upgrading/upgrade-to-1.7.0#barrier-key-auto-rotation ? Barrier Key Auto-Rotation If your

Question

Привет, можете подсказать чем грозит это обновление https://www.vaultproject.io/docs/upgrading/upgrade-to-1.7.0#barrier-key-auto-rotation ? Barrier Key Auto-Rotation If your

Vault installation is at least a year old, the barrier key will be automatically rotated once, and then subsequently will be rotated per the settings in the new sys/rotate/config endpoint. This is a precaution to ensure the number of encryptions performed by the barrier key is fewer than that recommended by NIST SP 800-38D.

это значит, что я не смогу расшифровать предыдущие бекапы волта?

#hashicorp #it #russian #software

0

10.08.2021

2 ответов

23 просмотра

dmitriy Автор вопроса

упустил, спасибо. значит ничем

0

10.08.2021

Сергей · Accepted Answer

https://www.vaultproject.io/docs/internals/rotation > The rotate operation is used to change the encryption key used to protect data written to the storage backend. This key is never provided or visible to operators, who only have unseal keys. This simplifies the rotation, as it does not require the current key holders unlike the rekey operation. When rotate is triggered, a new encryption key is generated and added to a keyring. All new values written to the storage backend are encrypted with the new key. Old values written with previous encryption keys can still be decrypted since older keys are saved in the keyring. This allows key rotation to be done online, without an expensive re-encryption process.

65 похожих чатов

Привет, можете подсказать чем грозит это обновление https://www.vaultproject.io/docs/upgrading/upgrade-to-1.7.0#barrier-key-auto-rotation ? Barrier Key Auto-Rotation If your

2 ответов

Похожие вопросы