cockroachdb / cockroachdb/cockroach
storage: allow decryption of file in a running store
Open
A-cli-admin
A-storage
branch-master
C-bug
T-storage
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
The encryption-at-rest metadata is protected by a store's file lock. This means that `cockroach debug encryption-decrypt` requires the operator to stop the relevant node first. When root causing a replica inconsistency, we may want to decrypt files within a checkpoint while a node is still running.
Relates to #142267.
https://cockroachlabs.slack.com/archives/CAC6K3SLU/p1741279631585599
Jira issue: CRDB-48325
Epic CRDB-48980
Contributor guide
Assessment
This issue has not been assessed yet.