We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 3aed543 + 241e635 commit f53f7e9Copy full SHA for f53f7e9
content/en/docs/tasks/administer-cluster/encrypt-data.md
@@ -27,6 +27,11 @@ The `kube-apiserver` process accepts an argument `--encryption-provider-config`
27
that controls how API data is encrypted in etcd. An example configuration
28
is provided below.
29
30
+{{< caution >}}
31
+**IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same!
32
+Otherwise, the kube-apiserver can't decrypt data stored inside the key-value store.
33
+{{< /caution >}}
34
+
35
## Understanding the encryption at rest configuration.
36
37
```yaml
0 commit comments