crossplane-contrib / provider-jet-azure

Apache License 2.0
17 stars 20 forks source link

Feature Request - Support for Data Encryption in Azure SQL #170

Closed shiroyp closed 2 years ago

shiroyp commented 2 years ago

We would like to have support in crossplane to be able create and manage Azure Postgres Single Server with Data Encryption. How this can be done in Azure console is documented here - https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?tabs=azure-portal

ytsarev commented 2 years ago

Is this TDE setup satisfies this issue https://github.com/crossplane-contrib/provider-jet-azure/pull/171 ?

Looks like there is not Database level support for TDE in underlying azurerm provider, see https://github.com/hashicorp/terraform-provider-azurerm/issues/87

So the question is if MSSQLserver level of transparent data encryption will satisfy your scenario?

shiroyp commented 2 years ago

I looked at our current code base and looks like it is only running azure sql level TDE at the moment. So for now, we can proceed with Azure SQL Server level TDE Support and include database level TDE support later once the support is available or if there is any additional ask around it.

ytsarev commented 2 years ago

@shiroyp that's great, thank you for the feedback!

ytsarev commented 2 years ago

Implemented by https://github.com/crossplane-contrib/provider-jet-azure/pull/171