KmsEncryptionProfile interface

Configure etcd encryption Key Management Service (KMS) key. Your Microsoft Entra application used to create the cluster must be authorized to access this keyvault, e.g using the AzureCLI: az keyvault set-policy -n $KEYVAULT_NAME --key-permissions decrypt encrypt --spn (YOUR APPLICATION CLIENT ID)

Properties

activeKey

The details of the active key.

vaultName

vaultName is the name of the keyvault that contains the secret.

visibility

visibility of the keyvault that contains the secret.

Property Details

activeKey

The details of the active key.

activeKey: KmsKey

Property Value

vaultName

vaultName is the name of the keyvault that contains the secret.

vaultName: string

Property Value

string

visibility

visibility of the keyvault that contains the secret.

visibility: string

Property Value

string