Skip to content

encryption.adoc

Latest commit

 

History

History
24 lines (18 loc) · 1.19 KB

encryption.adoc

File metadata and controls

24 lines (18 loc) · 1.19 KB
Raw

Encryption

The quorum and client communication are encrypted by default via TLS. This requires the Secret Operator to be present in order to provide certificates. The utilized certificates can be changed in a top-level config.

link:example$usage_guide/example-cluster-tls-encryption.yaml[role=include]

  1. The tls.serverSecretClass refers to the client-to-server encryption. Defaults to the tls secret.

  2. The tls.quorumSecretClass refers to the server-to-server quorum encryption. Defaults to the tls secret.

The tls secret is deployed from the Secret Operator and looks like this:

link:example$usage_guide/example-secret-operator-tls-secret.yaml[role=include]

You can create your own secrets and reference them in tls.serverSecretClass or tls.quorumSecretClass to use different certificates.

Note
 Configuring a client AuthenticationClass via usage_guide/authentication.adoc overrides the tls.serverSecretClass setting.