第6章 Encryption token is deleted or expired

Use this procedure to update the token if the encryption token for your key management system gets deleted or expires.

Prerequisites

Ensure that you have a new token with the same policy as the deleted or expired token

Procedure

Log in to OpenShift Container Platform Web Console.
Click Workloads Secrets
To update the ocs-kms-token used for cluster wide encryption:
1. Set the Project to openshift-storage.
2. Click ocs-kms-token Actions Edit Secret.
3. Drag and drop or upload your encryption token file in the Value field. The token can either be a file or text that can be copied and pasted.
4. Click Save.
To update the ceph-csi-kms-token for a given project or namespace with encrypted persistent volumes:
1. Select the required Project.
2. Click ceph-csi-kms-token Actions Edit Secret.
3. Drag and drop or upload your encryption token file in the Value field. The token can either be a file or text that can be copied and pasted.
4. Click Save.
  注記
  The token can be deleted only after all the encrypted PVCs using the ceph-csi-kms-token have been deleted.