roles/kubernetes/kubeadm/master/templates/encryption-config.j2


1
2
3
4
5
6
7
8
9
10
11
12
13

kind: EncryptionConfiguration
apiVersion: apiserver.config.k8s.io/v1
resources:
  - resources:
    - secrets
    providers:
    - secretbox:
        keys:
{% for key in kubernetes_secrets_cooked.encryption_config_keys %}
        - name: key{{ loop.index }}
          secret: {{ key }}
{% endfor %}
    - identity: {}