metadata KMS reads the user passphrase secret too eagerly at init time
metadata KMS reads the user passphrase secret too eagerly at init time: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). We're using ceph-csi RBD with at-rest encryption, KMS type metadata , and we point it at a per-tenant K8s Secret via secretName / secretNamespace…
The task
We're using ceph-csi RBD with at-rest encryption, KMS type `metadata`, and we point it at a per-tenant K8s Secret via `secretName` / `secretNamespace` in the StorageClass (the `userSecret` style of configuration, where `encryptionPassphrase` lives in a Kubernetes Secret in the tenant's namespace).
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.