Docs 22.1 Planning: Expand support for KMS providers Backup/Restore

[exalate-issue-sync]

Kathryn Hancox (kathancox) commented:

• What is the purpose?
  ** Backup and restore now support Google Cloud Storage KMS
  ** Users can now add new KMS encryption keys to backups using {{ALTER BACKUP ... ADD new_kms = ,kms_uris> WITH old_kms = <kms_uris>}}
• What are the deliverables?
  ** {{ALTER BACKUP}} is a new SQL statement, this will likely need a new sql page, ensuring the diagram is generated correctly etc. This will include all the building blocks required for a typical sql statement ref page.
  ** Update this page: https://www.cockroachlabs.com/docs/stable/take-and-restore-encrypted-backups.html to include GCS KMS — ensure the flow of this section and information provided in the existing AWS section is mirrored for GCS. (Research will be necessary to provide some information on generating this on the GCS side of things.)
  *** Consider here whether a filter for KMS provider is preferable or just follow on sections.
  ** Provide examples on this page ^ for using GCS KMS along with any nuances.
  ** Double check with Bulk/Engineer whether there are any limitations to document.
  ** Provide suitable links to any relevant GCS documentation on their KMS.
  ** Test examples to ensure instructions work as expected.
• Will this be backported?
  v22.1
• What is out of scope?
  Will this be addressed later?
• RACI chart
  Responsible - Kathryn H.
  Accountable - Kathryn H.
  Consulted - Darryl Wong, Liv Lobo, Abhinav Garg
  Informed - Liv Lobo
• Risk or dependencies
  N/A
• Additional resources
  ** https://cloud.google.com/storage/docs/encryption/using-customer-managed-keys

Jira Issue: DOC-2792