From 0ef0c8d570b004a258dfef6262f6659cc136c2c3 Mon Sep 17 00:00:00 2001 From: Viacheslav Vasilyev Date: Tue, 18 Jan 2022 12:40:37 +0200 Subject: [PATCH 1/3] Update encrypt-data.md - multi-master configuration notice Add short notice about multi-cluster configurations --- content/en/docs/tasks/administer-cluster/encrypt-data.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/content/en/docs/tasks/administer-cluster/encrypt-data.md b/content/en/docs/tasks/administer-cluster/encrypt-data.md index a8cc1be51c..cd9ddbe2f4 100644 --- a/content/en/docs/tasks/administer-cluster/encrypt-data.md +++ b/content/en/docs/tasks/administer-cluster/encrypt-data.md @@ -27,6 +27,11 @@ The `kube-apiserver` process accepts an argument `--encryption-provider-config` that controls how API data is encrypted in etcd. An example configuration is provided below. +{{< caution >}} +**IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same! +Otherwise, the kube-api-server will not be able to decrypt data stored inside the key-value store. +{{< /caution >}} + ## Understanding the encryption at rest configuration. ```yaml From ddd4a3defb381456357a5856d7222a7a31345cbf Mon Sep 17 00:00:00 2001 From: Viacheslav Vasilyev Date: Tue, 1 Feb 2022 12:38:35 +0200 Subject: [PATCH 2/3] Update content/en/docs/tasks/administer-cluster/encrypt-data.md Co-authored-by: Jim Angel --- content/en/docs/tasks/administer-cluster/encrypt-data.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/tasks/administer-cluster/encrypt-data.md b/content/en/docs/tasks/administer-cluster/encrypt-data.md index cd9ddbe2f4..d489edf567 100644 --- a/content/en/docs/tasks/administer-cluster/encrypt-data.md +++ b/content/en/docs/tasks/administer-cluster/encrypt-data.md @@ -29,7 +29,7 @@ is provided below. {{< caution >}} **IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same! -Otherwise, the kube-api-server will not be able to decrypt data stored inside the key-value store. +Otherwise, the kube-api-server can't decrypt data stored inside the key-value store. {{< /caution >}} ## Understanding the encryption at rest configuration. From 241e635197f62134081aba423d0a68f0dd923160 Mon Sep 17 00:00:00 2001 From: Viacheslav Vasilyev Date: Tue, 1 Feb 2022 15:31:21 +0200 Subject: [PATCH 3/3] Update content/en/docs/tasks/administer-cluster/encrypt-data.md Co-authored-by: Tim Bannister --- content/en/docs/tasks/administer-cluster/encrypt-data.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/tasks/administer-cluster/encrypt-data.md b/content/en/docs/tasks/administer-cluster/encrypt-data.md index d489edf567..a0fd004b2e 100644 --- a/content/en/docs/tasks/administer-cluster/encrypt-data.md +++ b/content/en/docs/tasks/administer-cluster/encrypt-data.md @@ -29,7 +29,7 @@ is provided below. {{< caution >}} **IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same! -Otherwise, the kube-api-server can't decrypt data stored inside the key-value store. +Otherwise, the kube-apiserver can't decrypt data stored inside the key-value store. {{< /caution >}} ## Understanding the encryption at rest configuration.