-1

I couldn't get clear answer if ADE is supported or not for AKS cluster node's OS & data disks. Has anyone used ADE for AKS node disks? If yes, any reference url/document will be helpful.

Update: As per this year old thread it seems ADE is not supported for AKS cluster node disks.

dss
  • 23
  • 3
  • @AnsumanBal-MT As per my understanding host-based encryption & Azure Disk encryption(ADE) are different. I agree host based encryption is supported by aks cluster but ADE. – dss Oct 28 '21 at 16:20

1 Answers1

0

Yes, Its Supported as per this Microsoft Documentation,

With host-based encryption, the data stored on the VM host of your AKS agent nodes' VMs is encrypted at rest and flows encrypted to the Storage service. This means the temp disks are encrypted at rest with platform-managed keys. The cache of OS and data disks is encrypted at rest with either platform-managed keys or customer-managed keys depending on the encryption type set on those disks. By default, when using AKS, OS and data disks are encrypted at rest with platform-managed keys, meaning that the caches for these disks are also by default encrypted at rest with platform-managed keys.

For Details on how to do Host-based encryption on Azure Kubernetes Service, Please follow the Document.

If you want to Bring Your Own Keys, then please refer this Microsoft Document .

Ansuman Bal
  • 9,705
  • 2
  • 10
  • 27