k8s.io/apiserver@v0.31.1/pkg/server/options/encryptionconfig/testdata/valid-configs/kms-first.yaml (about)

     1  kind: EncryptionConfiguration
     2  apiVersion: apiserver.config.k8s.io/v1
     3  resources:
     4    - resources:
     5        - secrets
     6      providers:
     7        - kms:
     8            name: testprovider
     9            endpoint: unix:///tmp/testprovider.sock
    10            cachesize: 10
    11            timeout: 7s
    12        - kms:
    13            apiVersion: v2
    14            name: testproviderv2
    15            endpoint: unix:///tmp/testprovider.sock
    16        - secretbox:
    17            keys:
    18              - name: key1
    19                secret: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
    20        - aescbc:
    21            keys:
    22              - name: key1
    23                secret: c2VjcmV0IGlzIHNlY3VyZQ==
    24              - name: key2
    25                secret: dGhpcyBpcyBwYXNzd29yZA==
    26        - identity: {}
    27        - aesgcm:
    28            keys:
    29              - name: key1
    30                secret: c2VjcmV0IGlzIHNlY3VyZQ==
    31              - name: key2
    32                secret: dGhpcyBpcyBwYXNzd29yZA==