kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

[zh-cn] Updated encrypt-data.md 

Signed-off-by: Gao Qian <gaoq.jy@fujitsu.com>
pull/38114/head
Gao Qian 2022-11-28 01:09:24 -05:00
parent 1d8f4528e7
commit ba1e0ab3f0
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
content/zh-cn/docs/tasks/administer-cluster/encrypt-data.md
View File

@ -350,11 +350,15 @@ program to retrieve the contents of your Secret.
<!-- <!--
1. Verify the stored Secret is prefixed with `k8s:enc:aescbc:v1:` which indicates 1. Verify the stored Secret is prefixed with `k8s:enc:aescbc:v1:` which indicates
the `aescbc` provider has encrypted the resulting data. the `aescbc` provider has encrypted the resulting data. Confirm that the key name shown in `etcd`
matches the key name specified in the `EncryptionConfiguration` mentioned above. In this example,
you can see that the encryption key named `key1` is used in `etcd` and in `EncryptionConfiguration`.
1. Verify the Secret is correctly decrypted when retrieved via the API: 1. Verify the Secret is correctly decrypted when retrieved via the API:
--> -->
3. 验证存储的密钥前缀是否为 `k8s:enc:aescbc:v1:`，这表明 `aescbc` provider 已加密结果数据。 3. 验证存储的密钥前缀是否为 `k8s:enc:aescbc:v1:`，这表明 `aescbc` provider 已加密结果数据。
确认 `etcd` 中显示的密钥名称和上述 `EncryptionConfiguration` 中指定的密钥名称一致。
在此例中，你可以看到在 `etcd` 和 `EncryptionConfiguration` 中使用了名为 `key1` 的加密密钥。
4. 通过 API 检索，验证 Secret 是否被正确解密： 4. 通过 API 检索，验证 Secret 是否被正确解密：