mirror of https://github.com/rustfs/rustfs.git synced 2026-09-06 03:59:14 +00:00

Files

T

Zhengchao An 20e4fd7de6 feat(ecstore): add the sealed remote credential seam (#7137 )

* feat(ecstore): add the sealed remote credential seam

Replication targets, remote tiers and on-demand migration sources will all
seal their stored secrets through one envelope rather than three
(rustfs/backlog#2168, design in docs/architecture/remote-credential-sealing-adr.md).

Adds the versioned envelope, the seal scope that binds a ciphertext to the
store, owner and field it belongs to, the sealer registration point, and the
fail-closed error type. ECStore still has no rustfs-kms dependency: the binary
installs a sealer the way it installs the event dispatch hook.

Nothing is wired to a consumer yet, so no stored format changes.

* docs(ecstore): name the event dispatch hook by module, not by symbol

The architecture guard keeps EVENT_DISPATCH_HOOK references inside the
event-notification owner module; the module doc cited the symbol only as an
example of the hook shape, so cite its file instead.

2026-09-04 12:11:49 +00:00

mod.rs

feat(ecstore): add the sealed remote credential seam (#7137 )

2026-09-04 12:11:49 +00:00

README.md

docs(ecstore): inventory api facade boundaries (#4025 )

2026-06-29 07:57:01 +08:00

README.md

ECStore API Layout

Owns explicit facade and compatibility re-export paths during the ECStore internal layout migration. No runtime logic lives here.

The current facade groups, external consumer boundaries, and shrink rules are recorded in docs/architecture/ecstore-api-facade-inventory.md.