Azure
CMK migration of existing registries
Customer Managed Keys (CMK) enables double encryption of content using customer provided keys, managed in Azure Keyvault. CMK is currently GA for newly configured registries. CMK conversion of existing registries are underway as we recognize that customers want/need CMK of registries they've already configured and secured.
Converting a registry to double-encrypted involves re-encrypting all content in the registry, while tracking the progress, and not having scheduled down-time. This extra work, to assure the registry is never offline, even for push operations is being completed.
@SteveLasker what is the timeline on this feature? Will this also make it possible to use a system identity from the start?
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}