Skip to content

Commit eb33387

Browse files
salaxanderritazh
andauthored
Update content/en/blog/_posts/2022-08-03-kms-v2-alpha.md
Co-authored-by: Rita Zhang <[email protected]>
1 parent d1ea236 commit eb33387

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

content/en/blog/_posts/2022-08-03-kms-v2-alpha.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,7 @@ The KMS v2 enhancement attempts to address all of these shortcomings (not all pl
2222
1. Support KMS plugins that use a key hierarchy to reduce network requests made to the remote vault. To learn more, check out the [details for how a KMS plugin can leverage key hierarchy](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3299-kms-v2-improvements#key-hierachy).
2323
1. Extra metadata is now tracked to allow a KMS plugin to communicate what key it is currently using with the `kube-apiserver`, allowing for rotation without API server restart. Data stored in etcd follows a more standard proto format to allow external tools to observe its state. To learn more, check out the [details for metadata](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3299-kms-v2-improvements#metadata).
2424
1. A dedicated status API is used to communicate the health of the KMS plugin with the API server. To learn more, check out the [details for status API](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3299-kms-v2-improvements#status-api).
25+
1. To improve observability, a new `UID` field is included in `EncryptRequest` and `DecryptRequest` of the v2 API. The UID is generated for each envelope operation. To learn more, check out the [details for observability](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/3299-kms-v2-improvements#Observability).
2526

2627
### Sequence Diagram
2728

0 commit comments

Comments
 (0)