Skip to content

libroach: rotate data encryption keys while running.#28148

Merged
craig[bot] merged 1 commit intocockroachdb:masterfrom
mberhault:marc/rework_keys
Aug 1, 2018
Merged

libroach: rotate data encryption keys while running.#28148
craig[bot] merged 1 commit intocockroachdb:masterfrom
mberhault:marc/rework_keys

Conversation

@mberhault
Copy link
Copy Markdown
Contributor

@mberhault mberhault commented Aug 1, 2018

  • use shared_ptr for keys in key manager
  • keep active date key as member
  • regenerate data key if needed when asked for

Release note (enterprise change): rotate encryption keys while running

@mberhault mberhault requested review from a team and bdarnell August 1, 2018 15:35
@cockroach-teamcity
Copy link
Copy Markdown
Member

This change is Reviewable

@mberhault mberhault mentioned this pull request Aug 1, 2018
29 tasks
Copy link
Copy Markdown
Contributor

@bdarnell bdarnell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed 6 of 6 files at r1, 4 of 4 files at r2.
Reviewable status: :shipit: complete! 0 of 0 LGTMs obtained

* use shared_ptr for keys in key manager
* keep active date key as member
* regenerate data key if needed when asked for

Release note (enterprise change): rotate encryption keys while running
@mberhault
Copy link
Copy Markdown
Contributor Author

bors r+

craig bot pushed a commit that referenced this pull request Aug 1, 2018
28148: libroach: rotate data encryption keys while running. r=mberhault a=mberhault

More details in the separate commits:
- keep the active data key as its own member so we don't have to look it up all the time, and make `Get(Current)Key` return `shared_ptr`
- actual rotation

Co-authored-by: marc <marc@cockroachlabs.com>
@craig
Copy link
Copy Markdown
Contributor

craig bot commented Aug 1, 2018

Build succeeded

@craig craig bot merged commit 7d98456 into cockroachdb:master Aug 1, 2018
@mberhault mberhault deleted the marc/rework_keys branch August 2, 2018 05:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants