Skip to main content

SecretEnvironmentStatusDto

Namespace: Meshmakers.Octo.Communication.Contracts.DataTransferObjects

Encryption status of the environment as seen from one tenant (bot services GET {tenantId}/v1/secrets/status, AB#5528/AB#5544). Environment-level and identical in every tenant except SecretEnvironmentStatusDto.LastVerifyAt. Never contains key material.

public class SecretEnvironmentStatusDto

Inheritance Object → SecretEnvironmentStatusDto

Properties​

KeyRingConfigured​

false: no key ring is configured - secret inputs are disabled, writes would fail with SecretEncryptionNotConfigured.

public bool KeyRingConfigured { get; set; }

Property Value​

Boolean

ActiveKeyId​

Key id new values are encrypted with; null when not configured.

public string ActiveKeyId { get; set; }

Property Value​

String

KnownKeyIds​

All key ids of the key ring.

public List<string> KnownKeyIds { get; set; }

Property Value​

List<String>

LegacyV1KeyConfigured​

True when the legacy enc:v1 key is configured (to read legacy values).

public bool LegacyV1KeyConfigured { get; set; }

Property Value​

Boolean

StrictMode​

True when strict mode is in force (legacy clear text / enc:v1 no longer accepted).

public bool StrictMode { get; set; }

Property Value​

Boolean

StrictModeSince​

When strict mode is scheduled / became active (UTC), or null.

public Nullable<DateTime> StrictModeSince { get; set; }

Property Value​

Nullable<DateTime>

RecurringVerifyCron​

Cron expression of the recurring Verify sweep; null when disabled.

public string RecurringVerifyCron { get; set; }

Property Value​

String

LastVerifyAt​

This tenant's last Verify run (UTC), null if none.

public Nullable<DateTime> LastVerifyAt { get; set; }

Property Value​

Nullable<DateTime>

Warnings​

Warning codes about the environment (JSON warnings, AB#5534); empty when there is nothing to warn about. Known codes: SecretEnvironmentWarningCodes. Clients show unknown codes as a generic warning.

public List<string> Warnings { get; set; }

Property Value​

List<String>

RequiredKeyIds​

Key ids of all encrypted (.octoenc) dumps currently held by bot services for this instance (pre-sweep dumps, tenant dumps, staged restore uploads), read from their clear-text headers (JSON requiredKeyIds, AB#5559). Every one of them must stay in the key ring until the newest dump encrypted with it has expired; a missing one is reported as SecretEnvironmentWarningCodes.DumpKeyMissing. Empty when there are no encrypted dumps or the service is older than AB#5559. Never key material.

public List<string> RequiredKeyIds { get; set; }

Property Value​

List<String>

Constructors​

SecretEnvironmentStatusDto()​

public SecretEnvironmentStatusDto()