Configure the kube-apiserver

  1. Open the kube-apiserver.yaml file located in /etc/kubernetes/manifests.

image-20250812-040940.png

kube-apiserver.yaml

  1. In the command section, add encryption-provider-config=/etc/kubernetes/encryption-config.yaml to enable the use of an external encryption provider.

image-20250812-041008.png


Add Flag

  1. In the volumeMounts section, add the following entries:

image-20250812-041048.png


volumeMounts

  1. In the volumes section, add the corresponding volume definitions.

image-20250812-041131.png


volumes

  1. Save the file and exit the editor.

  2. Restart the kube-apiserver.