mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-05-05 20:53:33 +00:00
Billy Tat
52 lines
1.5 KiB
Markdown
52 lines
1.5 KiB
Markdown
---
|
|
title: Encryption Key Rotation
|
|
---
|
|
|
|
<head>
|
|
<link rel="canonical" href="https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/manage-clusters/rotate-encryption-key"/>
|
|
</head>
|
|
|
|
### RKE1 Encryption Key Rotation
|
|
|
|
1. Enable encryption key rotation with either of the following two options:
|
|
|
|
- Select the `Enabled` radio button in the Rancher UI under **Cluster Options > Advanced Options > Secrets Encryption**:
|
|
|
|
|
|
|
|
- OR, apply the following YAML:
|
|
|
|
```yaml
|
|
rancher_kubernetes_engine_config:
|
|
services:
|
|
kube_api:
|
|
secrets_encryption_config:
|
|
enabled: true
|
|
```
|
|
|
|
2. Rotate keys in the Rancher UI:
|
|
|
|
2.1. Click **☰ > Cluster Management**.
|
|
|
|
2.2. Select **⋮ > Rotate Encryption Keys** on the far right of the screen next to your chosen cluster:
|
|
|
|
|
|
|
|
|
|
|
|
### RKE2 Encryption Key Rotation
|
|
|
|
_**New in v2.6.7**_
|
|
|
|
>**Important:** Encryption key rotation is enabled by default and cannot be disabled.
|
|
|
|
To rotate keys in the Rancher UI:
|
|
|
|
1. Click **☰ > Cluster Management**.
|
|
|
|
1. Select **⋮ > Rotate Encryption Keys** on the far right of the screen next to your chosen cluster:
|
|
|
|
|
|
|
|
|
|
>**Note:** For more information on RKE2 secrets encryption config, please see the [RKE2 docs](https://docs.rke2.io/security/secrets_encryption). |