Skip to content

Commit f53f7e9

Browse files
authored
Merge pull request #31387 from avoidik/patch-2
Update encrypt-data.md - multi-master configuration notice
2 parents 3aed543 + 241e635 commit f53f7e9

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

content/en/docs/tasks/administer-cluster/encrypt-data.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,11 @@ The `kube-apiserver` process accepts an argument `--encryption-provider-config`
2727
that controls how API data is encrypted in etcd. An example configuration
2828
is provided below.
2929

30+
{{< caution >}}
31+
**IMPORTANT:** For multi-master configurations (with two or more control plane nodes) the encryption configuration file must be the same!
32+
Otherwise, the kube-apiserver can't decrypt data stored inside the key-value store.
33+
{{< /caution >}}
34+
3035
## Understanding the encryption at rest configuration.
3136

3237
```yaml

0 commit comments

Comments
 (0)