KeysWithPotentiallyPersistedData returns the minimal, recent secrets which have migrated all given GRs.

MigratedFor returns whether all given resources are marked as migrated in the given key.

available from the first release, see defaultMode below.

we default to encryption being disabled for now.

available from the first release, see defaultMode below.

These annotations try to scare anyone away from editing the encryption secrets.

These annotations try to scare anyone away from editing the encryption secrets.

available from the first release, see defaultMode below.

GroupResourceState represents, for a single group resource, the write and read keys in a format that can be directly translated to and from the on disk EncryptionConfiguration object.

Mode is the value associated with the encryptionSecretMode annotation.