We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b599a32 commit 0ef0c8dCopy full SHA for 0ef0c8d
content/en/docs/tasks/administer-cluster/encrypt-data.md
@@ -27,6 +27,11 @@ The `kube-apiserver` process accepts an argument `--encryption-provider-config`
27
that controls how API data is encrypted in etcd. An example configuration
28
is provided below.
29
30
+{{< caution >}}
31
+**IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same!
32
+Otherwise, the kube-api-server will not be able to decrypt data stored inside the key-value store.
33
+{{< /caution >}}
34
+
35
## Understanding the encryption at rest configuration.
36
37
```yaml
0 commit comments