Uploaded image for project: 'Percona Server for MySQL'
  1. Percona Server for MySQL
  2. PS-5838

Enabling ENCRYPTION_KEY_ID for tablespaces and disable ENCRYPTION='KEYRING'

Details

    • Improvement
    • Status: Done
    • High
    • Resolution: Fixed
    • None
    • 8.0.17-8
    • None
    • None

    Description

      It should be possible to specify ENCRYPTION_KEY_ID for a tablespace.

      It should not be allowed to create general tablespace with KEYRING encryption. For encrypting tablespace with key from keyring user should use encryption threads.

      The original implementation from MariaDB also only allows to encrypt tablespaces with encryption threads (there is no notion of ENCRYPTION='KEYRING').
      This will affect PS-5817. In this ticket we say that default-table-encryption can be set to KEYRING_ON. When set it means that general tablespace should be created with DEFAULT ENCRYPTION='KEYRING'. However, we will not be supporting ENCRYPTION='KEYRING' for general tablespaces. In first releases we might not want to implement PS-5817 and restrict default-table-encryption to ON/OFF/ONLINE_TO_KEYRING/ONLINE_FROM_KEYRING_TO_UNENCRYPTED. This is still to be decided and I will link Jira ticket with conclusion once we have one.

       

      Attachments

        Activity

          People

            robert.golebiowski Robert Golebiowski (Inactive)
            robert.golebiowski Robert Golebiowski (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - Not Specified
                Not Specified
                Logged:
                Time Spent - 3 days, 5 hours, 30 minutes
                3d 5h 30m

                Smart Checklist