-
Type: Task
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
Fully Compatible
-
Sharding 2021-01-25
As part of this ticket:
- Introduce a new collection for storing cluster time keys, admin.system.external_validation_keys, with the schema described in this section of the tenant migration design document
- Change KeysCollectionManager (and its related classes) to load cluster time validating keys from this collection and use any keys from this collection with a keyId matching the keyId of received cluster time metadata. This is only necessary for keys in a standalone replica set.
- depends on
-
SERVER-53680 Use IDL for KeysCollectionDocument
- Closed
- is depended on by
-
SERVER-53404 [causal consistency] Make tenant migration donor copy the recipient's cluster time signing keys before sending recipientSyncData
- Closed
-
SERVER-53405 [causal consistency] Make tenant migration recipient copy the donor's cluster time signing keys before starting to clone
- Closed
-
SERVER-53406 [causal consistency] Add TTL to extra_validation_keys and clean up expired keys
- Closed