Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Check that all baseline nodes online.
  2. Start distributed process GROUP_KEY_CHANGE_PREPARE, each node
    1. verifies that re-encryption not in progress (?)
    2. ensures that new key identifier does not exists
    3. adds new key
  3. After successful completion of PREPARE, start distributed process GROUP_KEY_CHANGE_FINISH, each node
    1. sets new key for writing
    2. adds the mapping "WAL segment -> *old* key identifier" (to safely cleanup this key in the future)
    3. stores current pages count as total pages for background re-encryption (on applicable partitions).
    4. starts background re-encryption

...