30 Aug
2021
30 Aug
'21
11:57 a.m.
Slaves use their own encryption, they can use completely different set of keys with different rotation period. They don't have to be synchronized with the master.
That is clear, but I wanted to know in case they use the same key does the KMS API / Plugin somehow pick up the rotation event and perform the re-encryption on all the replicas (I guess could try just to test it)? Using multiple keys (per replica) would complicate the setup (a bit). rr