Enabling Key Management Systems for TDE

When creating new clusters, you can enable Transparent Data Encryption (TDE) to encrypt the data stored in your databases.

To secure the data encryption key, you can either enter a passphrase of your choice, or bring your own key from a key management provider such as HashiCorp Vault or AWS Key Management Service.

First, ensure the Key Management System provider of your choice has been enabled in the values.yaml:

• Adding KMS support

Then, configure your Key Management System provider:

• HashiCorp Vault

• AWS KMS

• Google Cloud KMS