TiKVEncryptionConfig

(Appears on: TiKVConfig)

FieldDescription
method
string

Encrypyion method, use data key encryption raw rocksdb data Possible values: plaintext, aes128-ctr, aes192-ctr, aes256-ctr Optional: Default to plaintext optional

data-key-rotation-period
string

The frequency of datakey rotation, It managered by tikv Optional: default to 7d optional

master-key
TiKVMasterKeyConfig

Master key config

previous-master-key
TiKVMasterKeyConfig

Previous master key config It used in master key rotation, the data key should decryption by previous master key and then encrypytion by new master key