GitHub user kongfanshen-0801 added a comment to the discussion: How to rotate KEK in cloudberry cluster？
Do you want to alter Master key or DEK (Data Encryption Key)? Now we don't support alter Master key and DEK (Data Encryption Key) if the cluster is running. And master key is hard code . If you want to change it, need to rebuild it. The master key define in source code. src/include/common/kmgr_utils.h The relative code : ``` /*generate by cmd "echo cloudberry | sha256sum | cut -d' ' -f1 " */ #define DEFAULT_CLUSTER_KEY_COMMAND "echo 6f1c78b6722ae3f3b65e038a30f087d22e2a47f84578d5913e06ef5c871ae4c6" ``` GitHub link: https://github.com/apache/cloudberry/discussions/1352#discussioncomment-14360403 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
