After using
vault operator rotate
it creates a new key and adds it to the keyring and all the new data from then on is encrypted using the new key.
But how do I re-encrypt the old data with the new key.
After using
vault operator rotate
it creates a new key and adds it to the keyring and all the new data from then on is encrypted using the new key.
But how do I re-encrypt the old data with the new key.
This is not supported - historically written data remains written with the old key until it is deleted or overwritten.