[IGNITE-12843] TDE - Phase-3. Cache key rotation.

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.10
• Labels: IEP-18 important tde-phase-3
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Pavel Pereslegin
• Reporter: Pavel Pereslegin
• Created: 27/Mar/20 10:32
• Updated: 26/Mar/21 09:25
• Resolved: 27/Oct/20 12:06

Description

Add the ability to rotate (change) the cache group encryption key.

The design is described here: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=95652384#TDE.Phase3.Cachekeyrotation.-Description

Issue Links

• causes: IGNITE-14222 CacheGroupReencryptionTest.testPartitionFileDestroyAndRecreate is flaky
• is related to: IGNITE-14424 Cache group re-encryption does not start after cluster secondary activation.
• is required by: IGNITE-13320 TDE - Phase-3. CLI management
• is required by: IGNITE-13626 .NET: Add EncryptionConfiguration.
• links to: Design description
• links to: Discussion link
• links to: GitHub Pull Request #7941
• links to: TC RunAll