-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Overview
Delete the old API so the compiler enforces snapshot + commitAndPush everywhere. Part of SERVER-136037.
Scope of Work
Remove from SLSKEKStorageAPIInterface and both implementations: get, put, getAll, size, updateAll, getActiveKEKId / setActiveKEKId, pop, standalone pushToWT, getCMKList / setCMKList, getActiveCMKListId / setActiveCMKListId, setKeystore / getKeystore.
Acceptance Criteria
- Old API gone; everything builds and all encryption tests pass.
- All ticket 1 regression tests are enabled.
- sys-perf patch run with no regressions.
- blocks
-
SERVER-138230 Derive SLSLogEncryptorManager mirrored keystore state from snapshots
-
- Needs Scheduling
-
- is blocked by
-
SERVER-138225 Migrate KEK store readers to KeystoreSnapshot
-
- Needs Scheduling
-
-
SERVER-138226 Migrate KEK write paths to commitAndPush
-
- Needs Scheduling
-
-
SERVER-138227 Migrate CMK write paths to commitAndPush
-
- Needs Scheduling
-
-
SERVER-138228 Move page_decryptor and encryption test fixtures off KEK store mutators
-
- Needs Scheduling
-