TiKVEncryptionConfig
(Appears on: TiKVConfig)
Field | Description |
---|---|
method string | Encrypyion method, use data key encryption raw rocksdb data Possible values: plaintext, aes128-ctr, aes192-ctr, aes256-ctr Optional: Default to plaintext optional |
data-key-rotation-period string | The frequency of datakey rotation, It managered by tikv Optional: default to 7d optional |
master-key TiKVMasterKeyConfig | Master key config |
previous-master-key TiKVMasterKeyConfig | Previous master key config It used in master key rotation, the data key should decryption by previous master key and then encrypytion by new master key |