k8s.io/apiserver@v0.31.1/pkg/server/options/encryptionconfig/testdata/valid-configs/aes-gcm-first.yaml (about)

     1  kind: EncryptionConfiguration
     2  apiVersion: apiserver.config.k8s.io/v1
     3  resources:
     4    - resources:
     5        - secrets
     6      providers:
     7        - aesgcm:
     8            keys:
     9              - name: key1
    10                secret: c2VjcmV0IGlzIHNlY3VyZQ==
    11              - name: key2
    12                secret: dGhpcyBpcyBwYXNzd29yZA==
    13        - secretbox:
    14            keys:
    15              - name: key1
    16                secret: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
    17        - kms:
    18            name: testprovider
    19            endpoint: unix:///tmp/testprovider.sock
    20            cachesize: 10
    21        - kms:
    22            apiVersion: v2
    23            name: testproviderv2
    24            endpoint: unix:///tmp/testprovider.sock
    25            timeout: 10s
    26        - aescbc:
    27            keys:
    28              - name: key1
    29                secret: c2VjcmV0IGlzIHNlY3VyZQ==
    30              - name: key2
    31                secret: dGhpcyBpcyBwYXNzd29yZA==
    32        - identity: {}