Configure the plugin-config File

  1. Create the plugin-config.yaml file in the k8s_plugin directory.

  2. For the hostname use the ESKM server host address.

  3. Set the mip_port to 5696.

  4. For cert, specify the path to the client certificate: certs/kms_plugin_client.crt.

  5. For key, specify the path to the private key: certs/kms_plugin_client.key.

  6. For ca, specify the path to the ESKM Local CA: certs/ESKMLocalCA.crt.

  7. For primary_uuid, enter the KMIP object UUID created for the corresponding user, see Create KMIP Object.

  8. For secondary_uuid, the value can be empty initially.

  9. Set debug_enabled to true to enable debug logs or set it to false to disable them.

eskm:
  hostname: 172.31.1.83
  kmip_port: 5696
  cert: certs/kms_plugin_client.crt
  key: certs/kms_plugin_client.key
  ca: certs/ESKMLocalCA.crt
  primary_uuid: ""
  secondary_uuids: []

logging_config:
  debug_enabled: true


image (2).jpg


Configure plugin-config File