Hi, does StarRocks support encryption at rest?
There seems to be some confusion:
- Issue #46223 mentions Transparent Data Encryption.
- PR #52179 mentions partial TDE support for non-cloud-native rowset read/write.
- However, I could not find clear official documentation explaining whether TDE is supported, from which version, in which deployment modes, and how to configure it.
Could you please clarify:
1. Is TDE / encryption at rest officially supported in StarRocks?
2. If yes, which versions and deployment modes are supported?
- Shared-data / cloud-native
- Shared-nothing / local BE storage
3. What data is encrypted?
- Rowset/segment files
- Metadata
- Temp/spill files
- Logs
- Backups/snapshots
4. Is this feature open-source, enterprise-only, experimental, or GA?
5. Can the official documentation be updated with configuration steps, limitations, and key-management details?