Skip to content

Commit

Permalink
[docs] encryption-at-rest is now natively supported
Browse files Browse the repository at this point in the history
This is a follow-up to c595665.

Change-Id: Ia0ebd410dae1e17641826795b2ac0b0ba7648d00
Reviewed-on: http://gerrit.cloudera.org:8080/21336
Reviewed-by: Mahesh Reddy <[email protected]>
Tested-by: Alexey Serbin <[email protected]>
Reviewed-by: Attila Bukor <[email protected]>
  • Loading branch information
alexeyserbin authored and attilabukor committed Apr 25, 2024
1 parent a0a5230 commit c57263c
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 8 deletions.
4 changes: 0 additions & 4 deletions docs/known_issues.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -172,10 +172,6 @@ anecdotal values that have been seen in real world production clusters:

* Row-level authorization is not available.

* Data encryption at rest is not directly built into Kudu. Encryption of
Kudu data at rest can be achieved through the use of local block device
encryption software such as `dmcrypt`.

* Server certificates generated by Kudu IPKI are incompatible with
link:https://www.bouncycastle.org/[bouncycastle] version 1.52 and earlier. See
link:https://issues.apache.org/jira/browse/KUDU-2145[KUDU-2145] for details.
Expand Down
4 changes: 0 additions & 4 deletions docs/security.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -629,7 +629,3 @@ Kudu has a few known security limitations:

External PKI:: Kudu does not support externally-issued certificates for internal
wire encryption (server to server and client to server).

On-disk Encryption:: Kudu does not have built-in on-disk encryption. However,
Kudu can be used with whole-disk encryption tools such as dm-crypt.

0 comments on commit c57263c

Please sign in to comment.