[MDEV-30849] Hashicorp Plugin: enable key version caching by default Created: 2023-03-14  Updated: 2023-11-28

Status: Stalled
Project: MariaDB Server
Component/s: Plugin - Hashicorp Key Management
Fix Version/s: 10.11

Type: Task Priority: Major
Reporter: Julius Goryavsky Assignee: Julius Goryavsky
Resolution: Unresolved Votes: 0
Labels: None

Issue Links:
Issue split
split from MDEV-29241 Hashicorp Plugin: Provide Key rotation Stalled

 Description   

It is necessary to enable key version caching in the default configuration, because with the current default settings, many users believe that caching is not really there or do not understand the difference between caching version numbers and key values and why enabling caching for key values does not significantly reduce the number of requests to server (because almost every key reading is preceded by a request for its version and this still results in a request to the Hashicorp Vault server).



 Comments   
Comment by Sergei Golubchik [ 2023-03-14 ]

also cache_timeout can be much larger. In fact, for a given pair of (K,V) the key value should never change, so the cache_timeout can even be infinite. May be there's no need to have a variable for that at all.

Generated at Thu Feb 08 10:19:22 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.