[
https://issues.apache.org/jira/browse/KUDU-2252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Attila Bukor updated KUDU-2252:
-------------------------------
Description:
It would be beneficial for Kudu to support native encryption at rest.
While the underlying filesystem can be encrypted with Kudu on top, there are
benefits to native encryption at rest:
* With native encryption support, it may be possible to specify different
encryption keys for different objects or object trees (such as is possible with
HDFS encryption)
* It may be possible to share a single block device with other storage,
including HDFS (note that some linux setups allow for "splitting" a device)
Design doc:
[https://docs.google.com/document/d/1rrQtAU4LPgAUi6fUsQZTGME6Yl6ranWjfItnUhluCQE/edit?tab=t.0#heading=h.1luclbq0kf3e]
was:
It would be beneficial for Kudu to support native encryption at rest.
While the underlying filesystem can be encrypted with Kudu on top, there are
benefits to native encryption at rest:
* With native encryption support, it may be possible to specify different
encryption keys for different objects or object trees (such as is possible with
HDFS encryption)
* It may be possible to share a single block device with other storage,
including HDFS (note that some linux setups allow for "splitting" a device)
> Design and implement native encryption at rest
> ----------------------------------------------
>
> Key: KUDU-2252
> URL: https://issues.apache.org/jira/browse/KUDU-2252
> Project: Kudu
> Issue Type: New Feature
> Components: fs, security
> Reporter: Mike Percy
> Assignee: Attila Bukor
> Priority: Major
> Labels: roadmap-candidate
> Fix For: 1.17.0
>
>
> It would be beneficial for Kudu to support native encryption at rest.
> While the underlying filesystem can be encrypted with Kudu on top, there are
> benefits to native encryption at rest:
> * With native encryption support, it may be possible to specify different
> encryption keys for different objects or object trees (such as is possible
> with HDFS encryption)
> * It may be possible to share a single block device with other storage,
> including HDFS (note that some linux setups allow for "splitting" a device)
> Design doc:
> [https://docs.google.com/document/d/1rrQtAU4LPgAUi6fUsQZTGME6Yl6ranWjfItnUhluCQE/edit?tab=t.0#heading=h.1luclbq0kf3e]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
