You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ignite.apache.org by ti...@apache.org on 2022/02/16 09:13:36 UTC
[ignite] 01/02: IGNITE-15074 : Fix documentation for support encrypted snapshots (#9238)
This is an automated email from the ASF dual-hosted git repository.
timoninmaxim pushed a commit to branch ignite-2.12
in repository https://gitbox.apache.org/repos/asf/ignite.git
commit 9895ff85bac1a60c67bc072c971b27d942bae603
Author: Vladimir Steshin <vl...@gmail.com>
AuthorDate: Mon Feb 14 16:00:30 2022 +0300
IGNITE-15074 : Fix documentation for support encrypted snapshots (#9238)
---
docs/_docs/security/tde.adoc | 4 +---
docs/_docs/snapshots/snapshots.adoc | 3 ++-
2 files changed, 3 insertions(+), 4 deletions(-)
diff --git a/docs/_docs/security/tde.adoc b/docs/_docs/security/tde.adoc
index 5d3ce1e..5d060c0 100644
--- a/docs/_docs/security/tde.adoc
+++ b/docs/_docs/security/tde.adoc
@@ -14,8 +14,6 @@
// limitations under the License.
= Transparent Data Encryption
-WARNING: This feature is in beta and not recommended for use in production environments.
-
== Overview
Transparent data encryption (TDE) allows users to encrypt their data at rest.
@@ -43,7 +41,7 @@ Transparent Data Encryption has some limitations that you should be aware of bef
*Snapshots and Recovery*
-* No support for snapshots. Snapshots are not encrypted and it's not possible to recover from a snapshot that includes an encrypted table or cache.
+* Encryption, changing of master key or cache group key are not allowed during snapshot operations.
== Configuration
To enable encryption in the cluster, provide a master key in the configuration of each server node. A configuration example is shown below.
diff --git a/docs/_docs/snapshots/snapshots.adoc b/docs/_docs/snapshots/snapshots.adoc
index 7b0e5f8..5456396 100644
--- a/docs/_docs/snapshots/snapshots.adoc
+++ b/docs/_docs/snapshots/snapshots.adoc
@@ -253,8 +253,9 @@ The snapshot procedure has some limitations that you should be aware of before u
* Snapshotting of specific caches/tables is unsupported. You always create a full cluster snapshot.
* Caches/tables that are not persisted in Ignite Persistence are not included into the snapshot.
-* Encrypted caches are not included in the snapshot.
+* Encrypted caches in the snapshot must be encrypted with the same master key.
* You can have only one snapshotting operation running at a time.
+* The snapshot operation is prohibited during a master key change and/or cache group key change.
* The snapshot procedure is interrupted if a server node leaves the cluster.
If any of these limitations prevent you from using Apache Ignite, then select alternate snapshotting implementations for