Comment 3 for bug 1921861

Revision history for this message
Dmitriy Rabotyagov (noonedeadpunk) wrote :

Hi Sebastian,

Thanks for reaching us!

Generally feature looks interesting. There are some concerns about the usecase, because with file implementation encrypton keys are stored on the same place as database which does not feel like secure. So I guess implementing option to select encryption plugin and install it (like aws_key_management) would be also cool.

Also there are some comments regarding current patch, since in case of the cluster, you probably need to generate them on localhost and later distribute to galera containers/hosts.

But yes, I'd say we have nothing against implementing this feature, and you may go ahead and push patch for it. For this you will need to setup a gerrit account https://docs.openstack.org/contributors/common/setup-gerrit.html after which you can make a commit and run `git review` to push it.