mrhid6
f41f2aaae7
Vantage encrypts SSH private keys, vault secrets, SSO client secrets and console credentials with KEY_ENCRYPTION_KEY. That key is in no backup and is not recoverable, so restoring a database without it produces a control plane whose every secret is permanently unreadable. vantagectl dumps and restores a whole database and stamps a SHA-256 fingerprint of the key into every archive, so a restore refuses rather than producing that database. The key itself is never written. - shared/cryptobox: AES-GCM extracted so the server and the CLI share one implementation rather than a copy that can drift - shared/backup: manifest, tar+gzip archive with per-member checksums verified before the first write, dump, restore, verify - vantagectl: its own module, so cobra stays out of the server, admin and sitesvc module graphs - container image, tagged release workflow, CI rebuild trigger - optional Helm CronJob, off by default - operator documentation, reconciled with the existing backups page