Skip to content

Commit 5f91c64

Browse files
Andriciucartemgavrilov
authored andcommitted
Reworded the DELETE (previous DROP) key function in Architecture chapter
Readded the DELETE key function based on 1257 in Architecture chapter where we also update from DROP to DELETE.
1 parent 179f5d7 commit 5f91c64

File tree

1 file changed

+12
-6
lines changed
  • contrib/pg_tde/documentation/docs/architecture

1 file changed

+12
-6
lines changed

contrib/pg_tde/documentation/docs/architecture/index.md

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -293,15 +293,21 @@ With `pg_tde.inherit_global_key_providers`, it is also possible to set up a defa
293293

294294
With this feature, it is possible for the entire database server to easily use the same principal key for all databases, completely disabling multi-tenency.
295295

296-
A default key can be managed with the following functions:
296+
#### Manage a default key
297297

298-
```sql
299-
pg_tde_set_default_key_using_global_key_provider('key-name', 'provider-name', 'true/false')
300-
```
298+
You can manage a default key with the following function:
299+
300+
* `pg_tde_set_default_key_using_global_key_provider('key-name','provider-name','true/false')`
301+
302+
!!! note
303+
Changing the default principal key will rotate the encryption of internal keys for all databases using the current default principal key.
304+
305+
#### Deleting the key
301306

302-
`DROP` is only possible if there's no table currently using the default principal key.
307+
The `pg_tde_delete_key()` function removes the principal key for the current database. If the current database has any encrypted tables, and there isn’t a default principal key configured, it reports an error instead. If there are encrypted tables, but there’s also a global default principal key, internal keys will be encrypted with the default key.
303308

304-
Changing the default principal key will rotate the encryption of internal keys for all databases using the current default principal key.
309+
!!! note
310+
WAL keys **cannot** be deleted, as server keys are managed separately.
305311

306312
### Current key details
307313

0 commit comments

Comments
 (0)