Zhengchao An a9373288f2 docs(architecture): decide how remote credentials are sealed at rest (#7131) ...

Replication targets, remote tiers and on-demand migration sources each store a
remote secret in clear text under .rustfs.sys today. Record one design for all
three before any of them invents its own: seal only the secret fields, into an
added field so an old reader finds the credential absent rather than a
ciphertext it would sign with, unseal at remote-client construction, and reach
KMS through an installed hook because ECStore does not depend on rustfs-kms.

Covers the envelope format and its encryption context, the mixed-version
compatibility matrix, the rollout gate, rotation ownership and the fail-closed
rules.

2026-09-04 16:30:17 +08:00

..

architecture

docs(architecture): decide how remote credentials are sealed at rest (#7131)

2026-09-04 16:30:17 +08:00

operations

fix: bound tier free-version recovery sweeps (#7125)

2026-09-04 08:12:01 +00:00

postmortems

fix(replication): send an integrity header on Object Lock PUTs (#7097)

2026-09-03 20:26:44 +08:00

testing

test(odm): add the scheduled provider interop lane (#7114)

2026-09-04 10:05:40 +08:00