mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-05-05 04:33:18 +00:00
Marty Hernandez Avedon
61b02185af
* canonicized horizontal-pod-autoscaler * added files_without_canonical.txt to gitignore * canonized access-clusters * canonicized manage-persistent-storage * canonicized install-cluster-autoscaler * canonicized provisioning-storage-examples * canonicized manage-clusters * missing versioned_docs
1.5 KiB
1.5 KiB
title
| title |
|---|
| Encryption Key Rotation |
RKE1 Encryption Key Rotation
-
Enable encryption key rotation with either of the following two options:
- Select the
Enabledradio button in the Rancher UI under Cluster Options > Advanced Options > Secrets Encryption:
- OR, apply the following YAML:
rancher_kubernetes_engine_config: services: kube_api: secrets_encryption_config: enabled: true - Select the
-
Rotate keys in the Rancher UI:
2.1. Click ☰ > Cluster Management.
2.2. Select ⋮ > Rotate Encryption Keys on the far right of the screen next to your chosen cluster:
RKE2 Encryption Key Rotation
New in v2.6.7
Important: Encryption key rotation is enabled by default and cannot be disabled.
To rotate keys in the Rancher UI:
-
Click ☰ > Cluster Management.
-
Select ⋮ > Rotate Encryption Keys on the far right of the screen next to your chosen cluster:
Note: For more information on RKE2 secrets encryption config, please see the RKE2 docs.