Support Features to Optimize System Security #18084

Description

P0 Task List:

Authentication

• Support Transport Layer Security(TLS) for TiFlash Support Transport Layer Security(TLS) for TiFlash #18080 @lidezhu
• Support TLS in the internal communication of TiDB cluster Support deploying and managing TLS encryption enabled TiDB cluster tiup#529 @AstroProfundis

Transparent Data Encryption(TDE)

• Support Transparent Data Encryption(TDE) for TiFlash Support Transparent Data Encryption(TDE) for TiFlash #18082 @lidezhu
• Support Transparent Data Encryption(TDE) for PD Support Transparent Data Encryption(TDE) for PD #18262 @yiwu-arbug

Data Mask and De-Identification

• Support De-Sensitization TiDB General Log Support general log desensitization #18034 @lysu
• Support error/info log desensitization Support error/info log desensitization #18566 @crazycs520

P1 Task List:

Authentication

• Supports TLS and online reload with new certs in CDC *: change the field influenceDispatchers to influenceTables ticdc#250
• Support TLS and online reload with new certs in DM Support TLS and online reload with new certs dm#467
• Support Security for TiSpark on Reading TiKV and TiFlash Support Security for TiSpark on Reading TiKV and TiFlash #18087
• Support Authentication and Privileges for TiSpark Support Authentication and Privileges for TiSpark #18081

Data Mask and De-Identification

• Support Data Mask and De-Identification like MySQL Support Data Mask #18083

For more details task: https://docs.google.com/document/d/1fMj6rCGrK_Gr4WeMJmBNGfPoZKG-dtVsq1VfWIHf558/edit#heading=h.r8aswyjagfkz

Category

Feature, Security

Value

Improve system security

Schedule

GanttStart: 2020-07-04
GanttDue: 2020-11-28
GanttProgress: 30%

Progress Tracking

• TiDB v5.0 Project Management Weekly Report - Security features Imporve