[GitHub] [accumulo] keith-turner commented on issue #2001: Per table encryption

[GitBox <gi...@apache.org>]

keith-turner commented on issue #2001:
URL: https://github.com/apache/accumulo/issues/2001#issuecomment-845319952


   > I had an idea for this table awareness problem. We could have a guard on any table that is configured for encryption to fail a bulk import if any file in the directory is unencrypted.
   
   That made me wonder if it would be possible to write a [CompactionSelector](https://github.com/apache/accumulo/blob/af2d2d630094fc06e0ac1d6702a9a49d30ec1e94/core/src/main/java/org/apache/accumulo/core/client/admin/compaction/CompactionSelector.java#L42) that selects unencrypted files for compaction.  This could be used in two ways.  First it could be configured on a user initiated compaction as a one time operation to encrypt all unencrypted files.  Second it could be configured on a table to continually select unencrypted files for compaction.  The second case may be an alternative to what you suggested for bulk imports, but its a more error prone because a user has to configure the selector on the table.  The first case would be useful for the case where someone wants to encrypt an existing table that is partially encrypted already.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org