feat(database): Implement optional Google KMS (Key Management Service) based encryption #920

arepala-uml · 2025-09-15T03:55:42Z

Added database/sops/sops.go with encrypt/decrypt helpers using getsops/sops and GCP KMS from DINGO_GCP_KMS_RESOURCE_ID.
Updated Blob Store GCS GetCommitTimestamp/SetCommitTimestamp to use the new SOPS package for transparent encryption/decryption

Closes #331

… timestamp Signed-off-by: Akhil Repala <arepala@blinklabs.io>

Signed-off-by: Chris Gianelloni <wolf31o2@blinklabs.io>

feat(database): Added sops encryption for google cloud storage commit…

a77afd6

… timestamp Signed-off-by: Akhil Repala <arepala@blinklabs.io>

arepala-uml marked this pull request as ready for review September 15, 2025 03:59

arepala-uml requested a review from a team as a code owner September 15, 2025 03:59

arepala-uml requested review from agaffney and wolf31o2 September 15, 2025 03:59

chore: merge origin/main

9dd608b

Signed-off-by: Chris Gianelloni <wolf31o2@blinklabs.io>

wolf31o2 approved these changes Sep 17, 2025

View reviewed changes

wolf31o2 merged commit b667be5 into main Sep 17, 2025
12 checks passed

wolf31o2 deleted the gcs_kms_encrypt branch September 17, 2025 16:11

Provide feedback