Docs for Active Record Encryption secrets?

[hardillb]

I've just pulled the latest version of the chart in order to do the 4.2.10 upgrade (from 4.2.6)

And it is now asking for extra secrets for ACTIVE_RECORD_ENCRYPTION

The docs imply these were added for 4.3.0 (a future release?) So it's unclear if these are really needed for 4.2.10 or if the current version of the helm chart is now only useful with nightly?

As there are not release tagged in this repo (but they are mentioned in the CHANGELOG.md) how to i get a suitable version of the helm chart to do the upgrade or should I just generate some random strings to use as the keys (if so are there any restrictios on length required?)

[lowlevl]

Hi, I had the same question, and upon digging into Mastodon's source-code, the generation of these values seems to be as straight-forward as generating a random 32 characters alphanumeric string, see https://github.com/mastodon/mastodon/blob/e15befebbd288faeec55ef6ad323d106f4ec57e1/lib/tasks/db.rake#L9.