Skip to content

Commit 0ef0c8d

Browse files
authored
Update encrypt-data.md - multi-master configuration notice
Add short notice about multi-cluster configurations
1 parent b599a32 commit 0ef0c8d

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

content/en/docs/tasks/administer-cluster/encrypt-data.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,11 @@ The `kube-apiserver` process accepts an argument `--encryption-provider-config`
2727
that controls how API data is encrypted in etcd. An example configuration
2828
is provided below.
2929

30+
{{< caution >}}
31+
**IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same!
32+
Otherwise, the kube-api-server will not be able to decrypt data stored inside the key-value store.
33+
{{< /caution >}}
34+
3035
## Understanding the encryption at rest configuration.
3136

3237
```yaml

0 commit comments

Comments
 (0)