Enabling encryption in-transit after deployment in external mode

Learn how to enable encryption in-transit after the deployment of a cluster in external mode.

Before you begin

Fusion Data Foundation is deployed and a storage cluster is created.

1. Patch the storagecluster to add encryption enabled as true to the storage cluster specification.

   oc patch storagecluster ocs-external-storagecluster -n openshift-storage --type json --patch  '[{ "op": "replace", "path": "/spec/network", "value": {"connections": {"encryption": {"enabled": true}}} }]'
   storagecluster.ocs.openshift.io/ocs-external-storagecluster patched

2. Check the connection settings in the CR.

   oc get storagecluster
   NAME                          AGE   PHASE   EXTERNAL   CREATED AT             VERSION
   ocs-external-storagecluster   9h    Ready   true       2024-11-06T20:48:03Z   4.18.0

   oc get storagecluster ocs-external-storagecluster -o yaml | yq '.spec.network.connections'
   encryption:
     enabled: true