-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Overview
Make every reader take one snapshot() per operation instead of calling several getters. Part of SERVER-136037.
Scope of Work
Readers in sls_log_encryptor_manager_impl.cpp and the status commands:
- _refreshFromKeyStorage
- {
Unknown macro: {initializeFromExistingCluster}
}
- {
Unknown macro: {loadAllCMKs}
}
- {
Unknown macro: {loadAndDecryptAllKEKs}
}
- {
Unknown macro: {decryptKEKfromStorage}
}
- _getActiveKEKFromStorage (today reads getAll then getActiveKEKId separately)
- getESECMKIdentifierListStatus / getESERotateActiveKEKStatus paths in {
Unknown macro: {sls_key_management_commands.cpp}
}
Acceptance Criteria
- No reader calls more than one store getter per logical operation.
- Enable the torn-read tests from ticket 1 that this fixes.
- Existing encryption unit tests and jstests pass.
- blocks
-
SERVER-138229 Remove legacy KEK store accessors, mutators and standalone pushToWT
-
- Needs Scheduling
-