public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 20:48:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added missing colons

Browse Source 
Signed-off-by: Derek Nola <derek.nola@suse.com>
This commit is contained in:
Derek Nola
2021-12-15 09:00:19 -08:00
parent 1be00a0628
commit cfeae950a3
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/k3s/latest/en/security/secrets_encryption/_index.md
+4 -4
View File
@@ -53,14 +53,14 @@ K3s contains a utility tool `secrets-encrypt`, which enables automatic control o
- Rotating and deleting encryption keys
- Reencrypting secrets
>**Warning** Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.
>**Warning:** Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.
### Single-Server Encryption Key Rotation
To rotate secrets encryption keys on a single-node cluster:
- Start the K3s server with the flag `--secrets-encryption`
>**Note** Starting K3s without encryption and enabling it at a later time is currently *not* supported.
>**Note:** Starting K3s without encryption and enabling it at a later time is currently *not* supported.
1. Prepare
@@ -87,7 +87,7 @@ The steps are the same for both embedded DB and external DB clusters.
To rotate secrets encryption keys on HA setups:
>**Note** While not required, it is recommended that you pick one server node from which to run the `secrets-encrypt` commands.
>**Note:** While not required, it is recommended that you pick one server node from which to run the `secrets-encrypt` commands.
- Start up all three K3s servers with the `--secrets-encryption` flag. For brevity, the servers will be referred to as S1, S2, S3.
@@ -155,7 +155,7 @@ To re-enable secrets encryption on a single node cluster:
### High-Availability Secrets Encryption Disable/Enable
After launching a HA cluster with `--secrets-encryption` flags, secrets encryption can be disabled.
>**Note** While not required, it is recommended that you pick one server node from which to run the `secrets-encrypt` commands.
>**Note:** While not required, it is recommended that you pick one server node from which to run the `secrets-encrypt` commands.
For brevity, the three servers used in this guide will be referred to as S1, S2, S3.