|
|
@@ -6073,7 +6073,7 @@ This approach can be used on any Kubernetes cluster.</p>
|
|
|
</code></pre></div>
|
|
|
<h2 id="secret-replication-and-encryption-configuration">Secret Replication and Encryption Configuration</h2>
|
|
|
<h3 id="location-and-replication">Location and Replication</h3>
|
|
|
-<p>By default, secrets are automatically replicated across multiple regions. You can specify a single location for your secrets by setting the <code>replicationLocation</code> field:</p>
|
|
|
+<p>By default, secrets are automatically replicated across multiple regions. You can specify one or more replication locations for your secrets by setting the <code>replicationLocations</code> field:</p>
|
|
|
<div class="highlight"><pre><span></span><code><span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">external-secrets.io/v1alpha1</span>
|
|
|
<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PushSecret</span>
|
|
|
<span class="nt">metadata</span><span class="p">:</span>
|
|
|
@@ -6089,7 +6089,8 @@ This approach can be used on any Kubernetes cluster.</p>
|
|
|
<span class="w"> </span><span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">kubernetes.external-secrets.io/v1alpha1</span>
|
|
|
<span class="w"> </span><span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PushSecretMetadata</span>
|
|
|
<span class="w"> </span><span class="nt">spec</span><span class="p">:</span>
|
|
|
-<span class="w"> </span><span class="nt">replicationLocation</span><span class="p">:</span><span class="w"> </span><span class="s">"us-east1"</span>
|
|
|
+<span class="w"> </span><span class="nt">replicationLocations</span><span class="p">:</span>
|
|
|
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="s">"us-east1"</span>
|
|
|
</code></pre></div>
|
|
|
<h3 id="customer-managed-encryption-keys-cmek">Customer-Managed Encryption Keys (CMEK)</h3>
|
|
|
<p>You can use your own encryption keys to encrypt secrets at rest. To use Customer-Managed Encryption Keys (CMEK), you need to:</p>
|