You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by GitBox <gi...@apache.org> on 2021/05/26 13:49:16 UTC
[GitHub] [iceberg] ggershinsky opened a new pull request #2640: Core: call native encryption API
ggershinsky opened a new pull request #2640:
URL: https://github.com/apache/iceberg/pull/2640
A set of fresh data encryption keys is generated for each data file (in formats that support native encryption). The data keys are wrapped centrally (eg in the driver), potentially via KMS interaction, and stored in the manifest key_metadata entry for this data file. The data keys are delivered via NativeFileEncryptParams objects to the workers that perform data file writing/encryption.
@rdblue @jackye1995 @RussellSpitzer @flyrain @aokolnychyi
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
[GitHub] [iceberg] ggershinsky commented on pull request #2640: Core: call native encryption API
Posted by GitBox <gi...@apache.org>.
ggershinsky commented on pull request #2640:
URL: https://github.com/apache/iceberg/pull/2640#issuecomment-849657692
The idea behind the split was to use the #2638 to highlight the challenge of encryption key passing, and to discuss the difference between native and stream encryption parameters. So it keeps only the minimal set of classes required to focus on these discussion topics.
This pull request will keep growing (currently it covers only the write path). I'll cross-reference the two prs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
[GitHub] [iceberg] jackye1995 commented on pull request #2640: Core: call native encryption API
Posted by GitBox <gi...@apache.org>.
jackye1995 commented on pull request #2640:
URL: https://github.com/apache/iceberg/pull/2640#issuecomment-849007338
Should we combine this with the #2638 you published? They are not long and reader of this PR has to have context of that one anyway.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org