8000 Encryption key rotation by graetzer · Pull Request #11080 · arangodb/arangodb · GitHub
[go: up one dir, main page]

Skip to content

Encryption key rotation #11080

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 18 commits into from
Mar 13, 2020
Merged

Encryption key rotation #11080

merged 18 commits into from
Mar 13, 2020

Conversation

graetzer
Copy link
Contributor
@graetzer graetzer commented Feb 12, 2020

Scope & Purpose

Allow to rotate encryption keys (by re-encrypting the actual internal key)

  • Strictly new functionality (i.e. a new feature / new option, no need for porting)
  • The behavior in this PR can be (and was) manually tested (support / qa / customers can test it)
  • The behavior change can be verified via automatic tests

Testing & Verification

This PR adds tests that were used to verify all changes:

  • Added new integration tests in the recovery testsuite

http://jenkins01.arangodb.biz:8080/job/arangodb-matrix-pr/8513/

Documentation

@graetzer
Copy link
Contributor Author

@graetzer
Copy link
Contributor Author
graetzer commented Feb 12, 2020

@jsteemann
Copy link
Contributor

Tests blue

@graetzer graetzer requested a review from jsteemann March 11, 2020 17:38
@graetzer
Copy link
Contributor Author

Comment on lines 368 to 380
//bool copyDirectoryRecursive(std::string const& source, std::string const& target,
// std::function<bool(std::string const&)> const& filter,
// std::string& error) {
//
// // "auto lambda" will not work here
// std::function<TRI_copy_recursive_e(std::string const&)> lambda =
// [&filter] (std::string const& pathname) -> TRI_copy_recursive_e {
// return filter(pathname) ? TRI_COPY_IGNORE : TRI_COPY_COPY;
// };
//
// return copyDirectoryRecursive(source, target, lambda, error);
//
//} // copyDirectoryRecursive (bool filter())
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's remove this altogether if not needed!

Comment on lines 90 to 92
//bool copyDirectoryRecursive(std::string const& source, std::string const& target,
// std::function<bool(std::string const&)> const& filter,
// std::string& error);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same

@jsteemann
Copy link
Contributor

@jsteemann
Copy link
Contributor

@jsteemann jsteemann merged commit 9ec1e92 into devel Mar 13, 2020
@jsteemann jsteemann deleted the feature/encryption-key-rotate branch March 13, 2020 18:13
ObiWahn added a commit that referenced this pull request Mar 16, 2020
…-fix/validation-fixes-and-improvements

* 'devel' of https://github.com/arangodb/arangodb: (25 commits)
  Do not instantiate snipped if not collection is found on the server. (#11281)
  Add entries related to search features in 3.7
  fix bug (#11279)
  Docs: Add DocuBlocks for document validation. (#11228)
  Feature/ngram similarity function (#11276)
  Fixed production check, removed assertion (#11273)
  fix compile warning
  Cluster Metrics (#11234)
  Feature/satellite graphs (#11015)
  fix newly created supervision bug with incremental updates (#11269)
  remove useless std::cout output
  fix yet more compile warnings
  Implement memory detection override. (#11268)
  implement a global deadline when running testcode in the local arangosh (#11123)
  Encryption key rotation (#11080)
  fix compile warnings
  fix compile warnings
  Feature/aql subquery execution block impl execute implementation (#10606)
  missing metrics (#10625)
  Bug fix/supervision server cleanup (#11187)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants
0