Dynamic Provisioning CMEK on GKE
This product or feature is in a pre-release state and might change or have limited support. For more information, see the product launch stages. Prerequisite A cluster A new cloud KMS key (Should be an available key) Deploy the compute engine persistent disk CSI driver to GKE cluster Assign the Cloud KMS CryptoKey Encrypter/Decrypter role 1. Kubernetes Driver Installation Guide roles/container.developer roles/iam.roleAdmin roles/iam.serviceAccountAdmin roles/iam.serviceAccountKeyAdmin roles/resourcemanager.projectIamAdmin Above roles required to run “setup-project....