Skip to content

WIP: cli: add enterprise-encryption flag.#20260

Closed
mberhault wants to merge 1 commit intocockroachdb:masterfrom
mberhault:marc/encryption_flag
Closed

WIP: cli: add enterprise-encryption flag.#20260
mberhault wants to merge 1 commit intocockroachdb:masterfrom
mberhault:marc/encryption_flag

Conversation

@mberhault
Copy link
Copy Markdown
Contributor

Part of encryption-at-rest work.

Add a CCL-only --enterprise-encryption flag (does not show
up on OSS builds) that adds arbitrary fields to the store spec.

This is a bit tortuous as we need to:

  • modify the startCmd flags (startCmd made public)
  • run an extra PreRun hook (added custom extra hook)
  • access the store specs from CCL code (serverCfg made public)
  • have a generic enough datastructure in StoreSpec

Some of these can be generalized. eg:

  • accessing all commands from CCL code (including flag formatting)
  • allow arbitrary number of additional hooks per command

How to hook those up into libroach is still TBD. These flags will
control at least two things:

  • the store version (only bumped if those flags are set)
  • the use of encryption in libroachccl

@mberhault mberhault requested a review from a team as a code owner November 25, 2017 16:13
@mberhault mberhault requested a review from a team November 25, 2017 16:13
@cockroach-teamcity
Copy link
Copy Markdown
Member

This change is Reviewable

@mberhault mberhault mentioned this pull request Nov 25, 2017
29 tasks
@mberhault mberhault force-pushed the marc/encryption_flag branch from 5e91c5c to 6691488 Compare November 26, 2017 02:03
@mberhault mberhault requested review from bdarnell and tbg November 27, 2017 21:55
Part of encryption-at-rest work.

Add a CCL-only `--enterprise-encryption` flag (does not show
up on OSS builds) that adds arbitrary fields to the store spec.

This is a bit tortuous as we need to:
* modify the startCmd flags (startCmd made public)
* run an extra PreRun hook (added custom extra hook)
* access the store specs from CCL code (serverCfg made public)
* have a generic enough datastructure in `StoreSpec`

Some of these can be generalized. eg:
* accessing all commands from CCL code (including flag formatting)
* allow arbitrary number of additional hooks per command

How to hook those up into libroach is still TBD. These flags will
control at least two things:
* the store version (only bumped if those flags are set)
* the use of encryption in libroachccl
@mberhault mberhault force-pushed the marc/encryption_flag branch from 6691488 to 5f7f3ad Compare November 29, 2017 12:48
@mberhault
Copy link
Copy Markdown
Contributor Author

Picking sha into #20225. Closing this one.

@mberhault mberhault closed this Nov 29, 2017
@mberhault mberhault deleted the marc/encryption_flag branch November 29, 2017 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants