Vault : How to re encrypt old data after rotating the key

After using

vault operator rotate

it creates a new key and adds it to the keyring and all the new data from then on is encrypted using the new key.
But how do I re-encrypt the old data with the new key.

This is not supported - historically written data remains written with the old key until it is deleted or overwritten.

1 Like