Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

KMS integration support for encryption at rest #2207

Closed
bmatican opened this issue Sep 3, 2019 · 1 comment
Closed

KMS integration support for encryption at rest #2207

bmatican opened this issue Sep 3, 2019 · 1 comment
Assignees
@daniel-yb
Labels
area/platform Yugabyte Platform
Milestone
v2.1

Comments

@bmatican
Copy link
Contributor

bmatican commented Sep 3, 2019

No description provided.

@bmatican bmatican added the area/docdb YugabyteDB core features label Sep 3, 2019
@bmatican bmatican added this to the v2.1 milestone Sep 3, 2019
@bmatican bmatican assigned ramkumarvs and unassigned rahuldesirazu Sep 4, 2019
@bmatican bmatican added area/platform Yugabyte Platform and removed area/docdb YugabyteDB core features labels Sep 4, 2019
@bmatican
Copy link
Contributor Author

bmatican commented Sep 4, 2019

Talked to @rkarthik007 , this is likely to be a platform-only issue, so re-purposing it.

@ramkumarvs ramkumarvs changed the title [docdb] KMS integration support for encryption at rest KMS integration support for encryption at rest Sep 4, 2019
@ramkumarvs ramkumarvs assigned daniel-yb and unassigned ramkumarvs Sep 4, 2019
daniel-yb added a commit that referenced this issue Sep 25, 2019
@daniel-yb
#2207 - KMS integration support for encryption at rest
6aa32a3 
Summary:
Added an encryption service interface to be easily extended for specific encryption key
service providers. Added an implementation of the interface for Equinix SmartKey.

Test Plan:
[[ https://learning.getpostman.com/docs/postman/collections/sharing_collections/ | How to import API Request Collection ]]
Sample API Collection: [[ https://www.getpostman.com/collections/29c1e9c04d38a1fb3269  | SmartKeyRequests ]]

**Order of operations to create a key**
**1)** Create KMS Config API

**2) ** Create Encryption Key API (In normal flow for an end user, KMS service is instantiated within UniverseController.create(), and provided what would be the request body for the wrapper API through a formData field 'encryptionAtRestConfig')

Reviewers: andrew, rahuldesirazu, arnav, sanketh, ram

Reviewed By: ram

Subscribers: yugaware

Differential Revision: https://phabricator.dev.yugabyte.com/D7237
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@daniel-yb daniel-yb

Labels
area/platform Yugabyte Platform
Projects
None yet
Milestone
v2.1
Development

No branches or pull requests
4 participants
@bmatican @ramkumarvs @rahuldesirazu @daniel-yb