Encryption token is deleted or expired

Update the token if the encryption token for your key management system gets deleted or expires.

Before you begin

Ensure that you have a new token with the same policy as the deleted or expired token.

About this task

Use this procedure to update the token if the encryption token for your key management system gets deleted or expires.

Procedure

  1. Log in to OpenShift Container Platform Web Console.
  2. Go to Workloads > Secrets.
  3. Update the ocs-kms-token used for cluster wide encryption.
    1. Set the Project to openshift-storage.
    2. Go to ocs-kms-token > Actions > Edit Secret.
    3. Drag and drop or upload your encryption token file in the Value field.
      The token can either be a file or text that can be copied and pasted.
    4. Click Save.
  4. Update the ceph-csi-kms-token for a given project or namespace with encrypted persistent volumes.
    1. Select the required Project.
    2. Go to ceph-csi-kms-token > Actions > Edit Secret.
    3. Drag and drop or upload your encryption token file in the Value field.
      The token can either be a file or text that can be copied and pasted.
    4. Click Save.
      Note: The token can be deleted only after all the encrypted PVCs using the ceph-csi-kms-token have been deleted.