Add option to re-encrypt tablespace keys for given server-id

Registered by Sergei Glushchenko

Add option to re-encrypt tablespace keys for given server-id. Option should be passed for --prepare (final step) and has following syntax:
--reencrypt-for-server-id=<new_server_id>
When --reencrypt-for-server-id specified, xtrabackup as a prepare step will generate new master key with ID based on new_server_id, store it into keyring file and re-encrypt tablespace keys inside of tablespace headers.

Using this option allows to startup mysqld instance with server-id different from the server-id of the instance the backup was taken from. For example, replication slave or galera node.

Blueprint information

Status:
Complete
Approver:
Sergei Glushchenko
Priority:
High
Drafter:
Sergei Glushchenko
Direction:
Approved
Assignee:
Sergei Glushchenko
Definition:
Approved
Series goal:
Accepted for 2.4
Implementation:
Implemented
Milestone target:
milestone icon 2.4.3
Started by
Sergei Glushchenko
Completed by
Sergei Glushchenko

Related branches

Sprints

Whiteboard

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.