13 Commits

Author	SHA1	Message	Date
Zhengchao An	b457c6abcc	feat(kms): add backup manifest and responsibility contract types (#5483) ... Contract-only module for KMS backup/restore (no handler or backend wiring): versioned manifest schema with completeness marker and sealed digest, the (backend, at-rest protection) responsibility matrix, typed fail-closed errors, and the zero-write restore dry-run report. Fields whose shape depends on in-flight contracts are reserved and reject data in format version 1.	2026-07-31 01:49:21 +08:00
Zhengchao An	d4f2efa2ad	fix(kms): report accurate Vault KV2 security contract and disable unsafe rotation (#5474)	2026-07-30 22:56:43 +08:00
Zhengchao An	6e5f330ff5	feat(kms): add operation timeout and typed retry policy engine (#5472)	2026-07-30 11:20:17 +00:00
唐小鸭	ad7663afd1	refactor(sse): decouple ecstore and harden KMS lifecycle (#5435) ... * refactor(sse): decouple encryption from ecstore * feat(kms): enhance KMS service manager with runtime state and persistence support * feat(kms): add local key export functionality for SSE-S3 migration tests * fix(kms): keep local key export narrowly scoped * fix(sse): validate copy source customer algorithm --------- Co-authored-by: Zhengchao An <anzhengchao@gmail.com>	2026-07-30 12:39:25 +08:00
唐小鸭	f329d330df	feat(kms): support safe local KMS evaluation workflows (#5418) ... * feat(kms): enable safe local KMS evaluation workflow * test(kms): align SSE reconfigure coverage --------- Co-authored-by: cxymds <cxymds@gmail.com>	2026-07-29 10:19:52 +00:00
唐小鸭	99e1f5fbd2	feat(kms): add static single-key backend (#5222)	2026-07-26 04:12:56 +08:00
唐小鸭	233865d172	feat(kms): introduce KMS unavailability error and enhance data key handling (#5184)	2026-07-26 04:04:35 +08:00
安正超	c3055f9335	security(kms): require explicit dev defaults opt-in (#3369) ... * security(kms): require explicit dev defaults opt-in * test(kms): satisfy clippy dev defaults checks	2026-06-12 07:05:20 +08:00
唐小鸭	f7724d223b	feat(rio): rio_v2 is compatible with minio for storing data. (#3115) ... * Set up a compatibility layer for replacing old Rio components with new ones. * fix(rio). compress range * feat(rio). Add the experimental feature rio_v2 to support minio data at the binary level. * feat(rio_v2): add sse-c test * test compression component * simple fix * fix minlz encode * fix metadata * fix kms key cache error * Update launch.json * ci: set nix crate download user agent * fix: gate obs pyroscope backend * ignore minio test * fix encrypt check * fix * fix * fix * Update object_usecase.rs * Update ci.yml * fix * ci add rio-v2 test * fix * ci fix * fix * Reconstructed into a more reasonable compatibility mode * fix * fix --------- Signed-off-by: houseme <housemecn@gmail.com> Signed-off-by: 唐小鸭 <tangtang1251@qq.com> Co-authored-by: houseme <housemecn@gmail.com> Co-authored-by: cxymds <Cxymds@qq.com> Co-authored-by: 安正超 <anzhengchao@gmail.com>	2026-06-08 11:59:14 +00:00
reatang	30a757a9da	feat(kms): add vault transit engine	2026-04-03 00:46:00 +08:00
weisd	28f57b228c	feat(s3): advance parity coverage (#2278)	2026-03-24 17:29:33 +08:00
唐小鸭	7a42af922d	Refactor: refactor SSE layer and KMS subsystem (#1703) ... Co-authored-by: houseme <housemecn@gmail.com>	2026-02-04 16:10:33 +08:00
guojidan	9ddf6a011d	feature: support kms && encryt (#573) ... * feat(kms): implement key management service with local and vault backends Signed-off-by: junxiang Mu <1948535941@qq.com> * feat(kms): enhance security with zeroize for sensitive data and improve key management Signed-off-by: junxiang Mu <1948535941@qq.com> * remove Hashi word Signed-off-by: junxiang Mu <1948535941@qq.com> * refactor: remove unused request structs from kms handlers Signed-off-by: junxiang Mu <1948535941@qq.com> --------- Signed-off-by: junxiang Mu <1948535941@qq.com>	2025-09-22 17:53:05 +08:00