mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-05 18:24:07 +00:00
Add encryption provider support via env variables
This commit is contained in:
parent
7560142e27
commit
a50114ac02
@ -1393,6 +1393,12 @@ function start-kube-apiserver {
|
|||||||
container_env="\"env\":[{\"name\": \"KUBE_CACHE_MUTATION_DETECTOR\", \"value\": \"${ENABLE_CACHE_MUTATION_DETECTOR}\"}],"
|
container_env="\"env\":[{\"name\": \"KUBE_CACHE_MUTATION_DETECTOR\", \"value\": \"${ENABLE_CACHE_MUTATION_DETECTOR}\"}],"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
if [[ -n "${ENCRYPTION_PROVIDER_CONFIG:-}" ]]; then
|
||||||
|
local encryption_provider_config_path="/etc/srv/kubernetes/encryption-provider-config.yml"
|
||||||
|
echo "${ENCRYPTION_PROVIDER_CONFIG}" | base64 --decode > "${encryption_provider_config_path}"
|
||||||
|
params+=" --experimental-encryption-provider-config=${encryption_provider_config_path}"
|
||||||
|
fi
|
||||||
|
|
||||||
src_file="${src_dir}/kube-apiserver.manifest"
|
src_file="${src_dir}/kube-apiserver.manifest"
|
||||||
remove-salt-config-comments "${src_file}"
|
remove-salt-config-comments "${src_file}"
|
||||||
# Evaluate variables.
|
# Evaluate variables.
|
||||||
|
Loading…
Reference in New Issue
Block a user