Emil Maskovsky 91df3795fc encryption: cover system.raft table in system_info_encryption ...

Extend system_info_encryption to encrypt system.raft SSTables.
system.raft contains the Raft log, which may hold sensitive user data
(e.g. batched mutations), so it warrants the same treatment as
system.batchlog and system.paxos.

During upgrade, existing unencrypted system.raft SSTables remain
readable. Existing data is rewritten encrypted via compaction, or
immediately via nodetool upgradesstables -a.

Update the operator-facing system_info_encryption description to
mention system.raft and add a focused test that verifies the schema
extension is present on system.raft.

Fixes: CUSTOMER-268

Backport: 2026.1 - closes an encryption-at-rest coverage gap: system.raft may persist sensitive user-originated data unencrypted; backport to the current LTS.

Closes scylladb/scylladb#29242

2026-04-16 13:22:10 +02:00

..

encryption

encryption: cover system.raft table in system_info_encryption

2026-04-16 13:22:10 +02:00

ldap

LICENSE: Update to version 1.1

2026-04-12 19:46:33 +03:00

CMakeLists.txt

…