zeekayandHanzo Dev 4bd3cbe1e0 kms: say what the plaintext store actually exposes here ...

The at-rest claim overreached: it described the Hanzo deployment as
replicating cleartext files to S3. That deployment has replication OFF —
REPLICATE_S3_ENDPOINT is unset and the boot log prints "S3 replication
disabled" — so the exposure is the claim itself: a volume snapshot, a
node with disk access, or any process that can read the data directory.
Still every credential the fleet syncs, still critical, but scoped to
what is true. Replication would extend it off-cluster, which is a reason
to migrate before enabling it, not a thing already happening.

Co-authored-by: Hanzo Dev <[email protected]>

2026-08-01 15:43:25 -07:00

..

atrest_test.go

kms: the store does not open without an at-rest key

2026-08-01 15:32:01 -07:00

atrest.go

kms: say what the plaintext store actually exposes here

2026-08-01 15:43:25 -07:00