Script for rotating db encryption key #260

New issue

Open

opened 2026-05-29 18:14:24 +00:00 by anton · 0 comments

anton commented 2026-05-29 18:14:24 +00:00 (Migrated from codeberg.org)

Copy link

• Include a test that proves the migration works
• Include old data backups in case of failure

* Include a test that proves the migration works * Include old data backups in case of failure

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

feat/apps-sync

feat/renovate-pilot

fix/diagnostic-data-exposure

ryansquared/fix-errors

feat/frontend-sentry

ryansquared/new-deployment-route-5-refactor

fix/gateway-config-preflight

ryansquared/tls-requires-domain

feat/supply-chain-audits

fix/lru-security-update

ryansquared/restructure-registration-routes

chore/remove-legacy-aws-bootstrap

fix/pricing-file-container-readability

fix/passkey-pin-error-message

test/live-e2e-workers-3-4

fix/adopt-atomic-steve-metadata

feat/source-host-bootstrap

test/live-e2e-startup-speedups

test/local-suite-speedups

feat/blue-green-deployments

merge/blue-green-main

feat/s3-prebuilt-components

fix/reject-unsupported-egress

ryansquared/add-sentry

fix/e2e-fixtures-and-status-assertions

xenush/update-readme

feat/forge-migration

fix/bootstrap-first-install

update-mirror-notice

ryansquared/multi-user-per-credential

fix/input-boundaries

feat/pr468-automatic-component-release

fix/platform-id-reaper

perf/tap-framer-io

docs/init-http-protection-mode

ryansquared/refactor-api-hcl-usage

fix/opentofu-output-deadlock

fix/byoc-runner-billing

fix/passkey-last-used

fix/bootproof-sdk-es384-der

ryansquared/add-webauthn-credential-reset

feat/admin-cli

feat/local-pgp-passphrase

ryansquared/extract-cli-cache-command

feat/update-codeberg-repository-references

ryansquared/migrate-to-enterprise.sh

fix/byoc-plan-upgrades-ui

feat/admin-unlimited-enclaves

feat/billing-page-byoc-clarity

fix/440-byoc-fail-closed

feat/public-e2ee-verifier

staging

fix/managed-dns-backfill-loop

feat/platform-dark-mode

feat/static-app-endpoints-cname

feat/public-attestation-verifier

fix/eif-dangling-rootfs-symlinks

ryansquared/drift-detector

fix/migration-replay

feat/fail-closed-e2e-routing

ryansquared/fix/migration-idempotency

feat/codeberg-github-mirror-fallback

fix/missing-app-public-ip

fix/cli-public-build-inputs

fix/pin-framework-archive

ryansquared/eliminate-usernameless-qrcode-login

feat/xwing-key-exchange

xenush/signup-cta

fix/issue-394-qr-countdown

feat/issue-402-h2c-upstream-protocol

feat/issue-402-enclave-caddy-tls

sign-up-copy

fix/atomic-signup-code-redemption

fix/qr-auth-phishing-warning

ryansquared/add-username-to-invitation

feat/ga-prep-work

feat/cli-stagex-container

fix/eif-s3-layer-cache

anton/byoc-require-login

quotas

test/pr1-integration-harness

ryansquared/add-database-bucket

No results found.

Labels

Clear labels   

Compat/Breaking

Breaking change that won't be backward compatible

  

Component/Enclave-Builder

This issue affects Enclave Builder (git-push and CLI)

  

Component/Infrastructure

This issue affects generic Caution hosted infra components

  

Deploy/BYOC

Relates to Caution Bring-your-own-compute

  

Deploy/Full-managed

Relates to Caution fully managed cloud

  

Deploy/Self-hosted

Relates to Caution deployed on self-hosted infra

  

Interface/API

This issue affects the API

  

Interface/CLI

This issue affects the command line interface

  

Interface/Git

This issue affects the Git `push` interface

  

Interface/Web

This issue affects the web dashboard

  

Kind/Bug

Something is not working

  

Kind/Documentation

Documentation changes

  

Kind/Enhancement

Improve existing functionality

  

Kind/Feature

New functionality

  

Kind/Security

This is security issue

  

Kind/Testing

Issue or pull request related to testing

  

Priority/Critical

The priority is critical

  

Priority/High

The priority is high

  

Priority/Low

The priority is low

  

Priority/Medium

The priority is medium

  

Reviewed/Confirmed

Issue has been confirmed

  

Reviewed/Duplicate

This issue or pull request already exists

  

Reviewed/Invalid

Invalid issue

  

Reviewed/Won't Fix

This issue won't be fixed

  

Status/Abandoned

Somebody has started to work on this but abandoned work

  

Status/Blocked

Something is blocking this issue or pull request

  

Status/Need More Info

Feedback is required to reproduce issue or to continue work

No labels

Compat/Breaking

Component/Enclave-Builder

Component/Infrastructure

Deploy/BYOC

Deploy/Full-managed

Deploy/Self-hosted

Interface/API

Interface/CLI

Interface/Git

Interface/Web

Kind/Bug

Kind/Documentation

Kind/Enhancement

Kind/Feature

Kind/Security

Kind/Testing

Priority/Critical

Priority/High

Priority/Low

Priority/Medium

Reviewed/Confirmed

Reviewed/Duplicate

Reviewed/Invalid

Reviewed/Won't Fix

Status/Abandoned

Status/Blocked

Status/Need More Info

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

public/platform#260

No description provided.