Configure Encryption Provider

Create an 'encryption-config.yaml' file at '/etc/kubernetes'.

The 'encryption-config.yaml' can be created using the below code snippet for KMS v2. Save the file.

YAML

apiVersion: apiserver.config.k8s.io/v1
kind: EncryptionConfiguration
resources:
  - resources:
      - secrets
    providers:
      - kms:
          apiVersion: v2
          name: kms-hsm
          endpoint: unix:///var/lib/kmsplugin/kmsplugin.sock
          timeout: 3s
      - identity: {}