KeysWithPotentiallyPersistedDataAndNextReadKey returns the minimal, recent secrets which have migrated all given GRs.

MigratedFor returns whether all given resources are marked as migrated in the given key.

available from the first release, see defaultMode below.

The current set of modes that are supported along with the default Mode that is used.

we default to encryption being disabled for now.

available from the first release, see defaultMode below.

These annotations try to scare anyone away from editing the encryption secrets.

These annotations try to scare anyone away from editing the encryption secrets.

available from the first release, see defaultMode below.

GroupResourceState represents, for a single group resource, the write and read keys in a format that can be directly translated to and from the on disk EncryptionConfiguration object.

Mode is the value associated with the encryptionSecretMode annotation.