Create ConfigMap and Secrets

This step involves creating a Kubernetes ConfigMap and a Secret to store the configuration and credentials required by the KMS plugin.

The ConfigMap (kms-plugin-config) holds the plugin's main configuration file (plugin-config.yaml). The Secret (kms-plugin-certs) securely stores the TLS certificates and key used for communication between the plugin and the ESKM server.

image-20250812-033557.png

Create ConfigMap kms-plugin-config

Any changes made in the plugin-config or certs corresponding configmap or secret should be deleted and created once, then restart the kms-plugin pod.