ubicloud/rhizome
Hadi Moshayedi 4c6f74738b Make StorageKeyEncryption.read_encrypted_dek backward compatible.
Previously, wrapped DEKs written to `data_encryption_key.json` were
encoded using `Base64.encode64`, which inserted a newline every 60
characters and always appended a trailing newline. Later, this was
changed to `Base64.strict_encode64`, which produces a single
uninterrupted string.

While `Base64.decode64` can handle both formats,
`Base64.strict_decode64` fails if newlines are present.

Since `StorageKeyEncryption.read_encrypted_dek` is called when starting
old VMs after a server reboot, it must remain backward compatible.

This change updates `StorageKeyEncryption.read_encrypted_dek` to use
`Base64.decode64`.
2025-08-21 16:02:20 -07:00
..
common Move metrics-collector to rhizome/common/bin 2025-05-23 12:42:17 +05:30
host Make StorageKeyEncryption.read_encrypted_dek backward compatible. 2025-08-21 16:02:20 -07:00
inference_endpoint Fix rhizome code not compatible with Ruby 3.0 2025-05-06 23:18:09 +09:00
kubernetes Install Metrics Server on new Kubernetes Clusters 2025-07-14 14:13:41 +03:00
minio/bin Enable minio.service so that we auto start after a possible reboot 2024-02-13 15:03:56 +01:00
postgres Don't close ubi_replication's connections 2025-07-07 19:11:45 +03:00
victoria_metrics/bin Add -dedup.minScrapeInterval to VictoriaMetrics command line 2025-05-08 16:47:01 +05:30
.rubocop.yml Change rhizome TargetRubyVersion to 3.0 2025-05-06 23:18:09 +09:00
Gemfile Make BUNDLE_GEMFILE=rhizome/Gemfile bundle install work from repository root 2025-05-06 23:18:09 +09:00
Gemfile.lock Add base64 to rhizome/host Gemfile 2025-04-29 16:45:24 -07:00