Skip to content

DOC-14245: Encryption at Rest for GSI #4128

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
simon-dew wants to merge 3 commits into
base: DOC-13938-encryption-at-rest
Choose a base branch
from
+4 −0
Draft

DOC-14245: Encryption at Rest for GSI #4128

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
edf41fa
GSI backfill files are encrypted
simon-dew Jun 12, 2026
6710b98
Add link to encryption at rest topic
simon-dew Jun 16, 2026
4527866
Replace 8.1 with codename Totoro release
simon-dew Jun 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions modules/manage/pages/manage-settings/general-settings.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@
:keywords: backfill
:imagesdir: ../../assets/images
:page-toclevels: 3
:totoro: codename Totoro release

[abstract]
{description}
Expand Down Expand Up @@ -265,6 +266,9 @@ Under *CURL() Function Access*, specify either *Unrestricted* or *Restricted*, t
When a query has an extremely large corresponding index scan, the indexer buffers the results into a temporary directory.
Since this method may cause high I/O and works differently on Windows, you can configure backfill settings for the {sqlpp} engine and its embedded GSI client.

In Couchbase Server {totoro} and later, backfill files are encrypted when encryption at rest is enabled.
For more information, see xref:learn:security/native-encryption-at-rest-overview.adoc[].

* The *Query Temp Disk Path* field enables you to specify the path to which the indexer writes temporary backfill files, to store any transient data during query processing.
The specified path must already exist.
Only absolute paths are allowed.
Expand Down