-
Notifications
You must be signed in to change notification settings - Fork 10
PG-1257 Add function for principal key removal #374
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
PG-1257 Add function for principal key removal #374
Conversation
2849a87
to
179f5d7
Compare
1392bd7
to
5f91c64
Compare
5f91c64
to
369410e
Compare
369410e
to
a18fe38
Compare
a18fe38
to
bd88553
Compare
4c1a316
to
4553814
Compare
PG_RETURN_VOID(); | ||
} | ||
|
||
pg_tde_delete_principal_key(MyDatabaseId, true); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does it make sense that we delete the copy of the principal key from the database here? Probably but hmm ...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure that I understood what confused you
c9b98c3
to
fabd2d0
Compare
fabd2d0
to
8575783
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good but I had some minor comments.
8575783
to
44065d4
Compare
44065d4
to
e02fd51
Compare
30181c6
to
dd71c27
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks great!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, approved!
dd71c27
to
72d5fce
Compare
Add SQL functions that allow user to remove principal key. * Database level principal key can be removed if there are no encrypted tables or if there is default key. For the first case we just drop key map file completely, for the second we perform key rotation. * Default principal key can be removed if there are no databases that use it. Readded the DELETE key function to docs based on 1257 in Architecture chapter where we also update from DROP to DELETE.
72d5fce
to
5df6c58
Compare
https://perconadev.atlassian.net/browse/PG-1257
Add SQL functions that allow user to remove principal key.