Skip to content

EncryptionConfig

Source code in docs_src/capo_eks/types/encryption_config.py
class EncryptionConfig(TypedDict, closed=True):
    resources: NotRequired["capo_eks.types.string_list.StringList"]
    """<important> <p>Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted.</p> </important> <p>Specifies the resources to be encrypted. The only supported value is <code>secrets</code>.</p>"""
    provider: NotRequired["capo_eks.types.provider.Provider"]
    """<p>Key Management Service (KMS) key. Either the ARN or the alias can be used.</p>"""

provider instance-attribute

provider: NotRequired[Provider]

Key Management Service (KMS) key. Either the ARN or the alias can be used.

resources instance-attribute

resources: NotRequired[StringList]

Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted.

Specifies the resources to be encrypted. The only supported value is secrets.