Alexander Scheel

As we've broadened usage of `ListResponseWithInfo(...)`, a key storage improvement arises: `ListPage(...)` followed by `n` calls to `Get(...)` is less performant than a `ListDataPage(...)` which returns full entries alongside the...

When using transactional storage, we often have a problem of locality of effects: certain on-commit behaviors cannot reasonably be localized to the given method. For instance, consider namespace creation: 1....

SBOM - not showing license information for dependencies

1

From a recent SBOM `bao-hsm_2.4.1_Linux_x86_64.tar.gz.sbom.json`: ```json { "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-azure-sdk-for-go-sdk-azidentity-260e163734536616", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [ { "algorithm": "SHA256", "checksumValue": "536ad3bb711ffbbc3d14728801733a672a85dd4396259d76cc89bccc408015f8" } ], "sourceInfo": "acquired...

Drop github.com/klauspost/compress

3

Static GZIP compression should be easily achievable with a `sync.Once` and a simple handler to detect the gzip accept-encoding type. This is only used in the HTTP handlers. Arguably, `robots.txt`...

Default to disable_unauthed_rekey_endpoints=true

1

As discussed with the new authenticated rotation endpoints available for a full release, now we can complete the deprecation and default to disabling the unsafe legacy rekey endpoints.

Triage Bitnami container usage

2

See: https://github.com/bitnami/containers/issues/83267 > After evaluating the impact and community feedback, the Bitnami team has postponed the deletion of the Bitnami public catalog (docker.io/bitnami) until September 29th to give users more...

### Summary For better security of cryptographic material, keys within OpenBao should optionally be backed by a KMS or HSM solution. We design a per-namespace repository of seal configurations, with...