Re: Issue InnoDB cluster + Encrypted tables (TDE) - keyring_okv

[Georgi Kodinov]

The Innodb tablespace keys (as well as the rest of the keys the server uses) are "local" to the server instance.
When you replicate (as you do with innodb cluster) the data gets decrypted by the master before being re-encrypted and sent over the wire to the slave that re-encrypts it with its local key before storing it into the innodb table.

So IMHO you shouldn't expect that the keys will replicate too.

I'll leave it to my innodb colleagues to explain when exactly does the key propagate through the keyring plugin to OKV when you create a table with ENCRYPTION='y'

Georgi "Joro" Kodinov
MySQL SrvGen team lead
Plovdiv, Bulgaria