Support Features to Optimize System Security #18084
Description
Description
P0 Task List:
Authentication
- Support Transport Layer Security(TLS) for TiFlash Support Transport Layer Security(TLS) for TiFlash #18080 @lidezhu
- Support TLS in the internal communication of TiDB cluster Support deploying and managing TLS encryption enabled TiDB cluster tiup#529 @AstroProfundis
Transparent Data Encryption(TDE)
- Support Transparent Data Encryption(TDE) for TiFlash Support Transparent Data Encryption(TDE) for TiFlash #18082 @lidezhu
- Support Transparent Data Encryption(TDE) for PD Support Transparent Data Encryption(TDE) for PD #18262 @yiwu-arbug
Data Mask and De-Identification
- Support De-Sensitization TiDB General Log Support general log desensitization #18034 @lysu
- Support error/info log desensitization Support error/info log desensitization #18566 @crazycs520
P1 Task List:
Authentication
- Supports TLS and online reload with new certs in CDC *: change the field influenceDispatchers to influenceTables ticdc#250
- Support TLS and online reload with new certs in DM Support TLS and online reload with new certs dm#467
- Support Security for TiSpark on Reading TiKV and TiFlash Support Security for TiSpark on Reading TiKV and TiFlash #18087
- Support Authentication and Privileges for TiSpark Support Authentication and Privileges for TiSpark #18081
Data Mask and De-Identification
- Support Data Mask and De-Identification like MySQL Support Data Mask #18083
For more details task: https://docs.google.com/document/d/1fMj6rCGrK_Gr4WeMJmBNGfPoZKG-dtVsq1VfWIHf558/edit#heading=h.r8aswyjagfkz
Category
Feature, Security
Value
Improve system security
Schedule
GanttStart: 2020-07-04
GanttDue: 2020-11-28
GanttProgress: 30%