mccheah commented on issue #20: Encryption in Data Files
URL: 
https://github.com/apache/incubator-iceberg/issues/20#issuecomment-443796462
 
 
   Let me also explain in more detail. In our system we don't have a mapping 
from file paths to encryption key names. We can't store that without changing 
the way our storage solution reasons about encryption. We are using Iceberg as 
an ephemeral representation of the data that will be read by Spark and written 
via Spark. On the write side specifically, our `KeyManager` plugin will need 
the file paths to store the encryption keys, because that's the only metadata 
we will have available to us on the read side. In other words, because some 
internal key storage and metastore solutions don't have a notion of a key name 
per file, we should pass in the file path to the `KeyManager` APIs so that they 
can use that as an additional option for their situations.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to