KmsEncryptionProfile interface

Configure etcd encryption Key Management Service (KMS) key. Your Microsoft Entra application used to create the cluster must be authorized to access this keyvault, e.g using the AzureCLI: az keyvault set-policy -n $KEYVAULT_NAME --key-permissions decrypt encrypt --spn (YOUR APPLICATION CLIENT ID)

Properties

activeKey

The details of the active key.

keyVaultType

The type of keyvault used for KMS encryption. Defaults to KeyVault when absent.

vaultName

vaultName is the name of the keyvault that contains the secret.

visibility

visibility of the keyvault that contains the secret.

Property Details

activeKey

The details of the active key.

activeKey: KmsKey

Property Value

keyVaultType

The type of keyvault used for KMS encryption. Defaults to KeyVault when absent.

keyVaultType?: string

Property Value

string

vaultName

vaultName is the name of the keyvault that contains the secret.

vaultName: string

Property Value

string

visibility

visibility of the keyvault that contains the secret.

visibility: string

Property Value

string