Details
-
Investigation
-
Resolution: Duplicate
-
Major - P3
-
None
-
None
-
None
-
Not Needed
Description
Original Downstream Change Summary
This change applies the Queryable Encryption protocol and on-disk format version 2 ("QEv2"), which is NOT backwards compatible with the preview version of QE ("QEv1"). Among the breaking changes include:
- New encrypted (on-disk and over-the-wire) payload formats that replace the QEv1 formats in preview.
- The server now responds with an error to encrypted CRUD commands that use any of the QEv1 payload formats.
- The server now responds with an error to delete, update, or findAndModify commands that include a deleteTokens field in their encryptionInformation field.
- Modifying or reading from an existing QEv1-encrypted collection using the QEv2 protocol may cause undefined behavior. Users must migrate their QEv1-encrypted data and drop the QEv1-encrypted collection (and its associated state collections) before upgrading the server to one that implements QEv2 (ie. 7.0 and above).
- The response returned by a compactStructuredEncryptionData command no longer includes the ecc field which contained read/write statistics for the ECC collection.
New options that were added include:
- a new cluster parameter called fleCompactionOptions which may contain two subfields:
- maxCompactionSize - limits the total size of the set of ESC documents that will be removed by each compactStructuredEncryptionData operation. Defaults to 256 MiB.
- maxESCEntriesPerCompactionDelete - limits the number of ESC non-anchor documents that will be removed by each delete operation performed by the compactStructuredEncryptionData operation. Defaults to 350k.
Description of Linked Ticket
Enable the feature flag for this project.
Attachments
Issue Links
- depends on
-
SERVER-69563 Enable Feature flag for PM-2972
-
- Closed
-