Issue InnoDB cluster + Encrypted tables (TDE) - keyring_okv

[Guillaume Baste]

Hello,

I'm having an issue with my encrypted tables and my innodb cluster and keyring_okv.

If my tables is Encryption='Y' and I restart mysqld on a slave server, the slave server can't find the master key anymore.

The okvclient.jar has been deployed on my 3 nodes and the connection between my nodes & okv server is good :

root@INNODB2:/okvcilentjar# /var/lib/mysql-keyring/bin/okvutil list
No objects found

But I'm wondering when I'm doing the first encryption of the table I don't have a real key. Because when I do a "okvutil list" I got "No objects found" should not I have a key ?

If i'm doing a "ALTER INSTANCE ROTATE INNODB MASTER KEY;" now I got a key with "okvutil list"

Do you have any idea ?

Thanks for reply

Regards