You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ignite.apache.org by ti...@apache.org on 2022/02/16 09:13:36 UTC

[ignite] 01/02: IGNITE-15074 : Fix documentation for support encrypted snapshots (#9238)

This is an automated email from the ASF dual-hosted git repository.

timoninmaxim pushed a commit to branch ignite-2.12
in repository https://gitbox.apache.org/repos/asf/ignite.git

commit 9895ff85bac1a60c67bc072c971b27d942bae603
Author: Vladimir Steshin <vl...@gmail.com>
AuthorDate: Mon Feb 14 16:00:30 2022 +0300

    IGNITE-15074 : Fix documentation for support encrypted snapshots (#9238)
---
 docs/_docs/security/tde.adoc        | 4 +---
 docs/_docs/snapshots/snapshots.adoc | 3 ++-
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/docs/_docs/security/tde.adoc b/docs/_docs/security/tde.adoc
index 5d3ce1e..5d060c0 100644
--- a/docs/_docs/security/tde.adoc
+++ b/docs/_docs/security/tde.adoc
@@ -14,8 +14,6 @@
 // limitations under the License.
 = Transparent Data Encryption
 
-WARNING: This feature is in beta and not recommended for use in production environments.
-
 == Overview
 Transparent data encryption (TDE) allows users to encrypt their data at rest.
 
@@ -43,7 +41,7 @@ Transparent Data Encryption has some limitations that you should be aware of bef
 
 *Snapshots and Recovery*
 
-* No support for snapshots. Snapshots are not encrypted and it's not possible to recover from a snapshot that includes an encrypted table or cache.
+* Encryption, changing of master key or cache group key are not allowed during snapshot operations.
 
 == Configuration
 To enable encryption in the cluster, provide a master key in the configuration of each server node. A configuration example is shown below.
diff --git a/docs/_docs/snapshots/snapshots.adoc b/docs/_docs/snapshots/snapshots.adoc
index 7b0e5f8..5456396 100644
--- a/docs/_docs/snapshots/snapshots.adoc
+++ b/docs/_docs/snapshots/snapshots.adoc
@@ -253,8 +253,9 @@ The snapshot procedure has some limitations that you should be aware of before u
 
 * Snapshotting of specific caches/tables is unsupported. You always create a full cluster snapshot.
 * Caches/tables that are not persisted in Ignite Persistence are not included into the snapshot.
-* Encrypted caches are not included in the snapshot.
+* Encrypted caches in the snapshot must be encrypted with the same master key.
 * You can have only one snapshotting operation running at a time.
+* The snapshot operation is prohibited during a master key change and/or cache group key change.
 * The snapshot procedure is interrupted if a server node leaves the cluster.
 
 If any of these limitations prevent you from using Apache Ignite, then select alternate snapshotting implementations for