Enabling and disabling key rotation when using KMS

Security common practices require periodic encryption of key rotation. You can enable or disable key rotation when using key management system (KMS).

Enforcing precedence for key rotation
Configure how Fusion Data Foundation determines key rotation order by enforcing precedence between persistent volume claims (PVCs) and storage classes.
Enabling key rotation
Enable key rotation by adding the required annotation to a Namespace, StorageClass, or PersistentVolumeClaim.
Disabling key rotation
Disable key rotation for a storage class or specific persistent volume claim (PVC) by updating annotations or modifying the EncryptionKeyRotationCronJob to stop scheduled rotation.

Parent topic: Persistent volume encryption