search

zalando / spilo

Highly available elephant herd: HA PostgreSQL cluster using Docker
Apache License 2.0
1.56k stars 387 forks source link

Standby cluster from encrypted backup #839

Closed mubn closed 1 year ago

mubn commented 1 year ago

After the wall-g environment variables for enabling encryption were added in #636 The encryption can be enabled now, but a standby cluster can not pull the archives created in the primary cluster. The data encrypted on the primary cluster (with libsodium) is being pulled from S3 by the standby cluster, but the archives can not be decompressed. The WALG_LIBSODIUM_KEY is the same in both clusters. The error:

ERROR: 2023/02/08 12:09:11.403151 Extraction error in part_001.tar.lz4: extractOne: tar extract failed: lz4: bad magic number

Should it be possible to have backup encryption enabled together with having a standby cluster replicating the encrypted data from S3?

mubn commented 1 year ago

My fault. I didn't add the "_standby" variables. Same issue like here: https://github.com/zalando/postgres-operator/issues/1150