credential management
Migrate Encryption Endpoint
Re-encrypt all at-rest credentials into the AES-256-GCM (v2:gcm:) format.
Admin only. Requires general_settings.encryption_algorithm: aes-256-gcm. Idempotent and resumable — re-running skips already-migrated values. Pass dry_run=true for a non-mutating scan (equivalent to --check).
post/credentials/migrate-encryption
Query parameters
dry_runboolean
If true, scan and report without writing any changes.
If true, scan and report without writing any changes.
Response
Successful Response
{"stackTrail":"paths:/credentials/migrate-encryption:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}
Changes
Changed in 1 of the 42 revisions of this API.1
- ○
endpoint added
endpoint-added
This revision also has 5 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
- ○