From f02f3f941124c2b07e7e972d6630b9e731fb19d4 Mon Sep 17 00:00:00 2001 From: Silvio Moioli Date: Tue, 10 Sep 2024 09:38:42 +0200 Subject: [PATCH] README: SQLite specify encryption limitations (#269) Co-authored-by: Paulo Gomes --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index d5764b0f..4e905f0f 100644 --- a/README.md +++ b/README.md @@ -61,6 +61,14 @@ Steve is used with SQLite caching of resources, which is configured when calling `server.New` via the `server.Options.SQLCache` boolean option. Meaning and behavior are the same unless otherwise specified. +Note that, if SQLite caching of resources is enabled, some of the data +can be stored in disk, in either encrypted or plain text forms based on: + - by default, Secrets are always encrypted + - if the environment variable `CATTLE_ENCRYPT_CACHE_ALL` is set to "true", +all resources are encrypted + - regardless of the setting's value, any filterable/sortable columns are stored +in plain text (see `filter` below for the exact list) + #### `limit` **If SQLite caching is disabled** (`server.Options.SQLCache=false`),