<p>I am unable to figure out how to change my kube-apiserver. The current version I am using from azure AKS is 1.13.7.</p>

<p>Below is what I need to change the kube-apiserver in kubernetes.</p>

<p>The kube-apiserver process accepts an argument --encryption-provider-config that controls how API data is encrypted in etcd.</p>

<p>Additionally, I am unable to find the kube-apiserver.</p>

<p><a href="https://i.stack.imgur.com/wEvPM.png" rel="nofollow noreferrer">Yaml File Formatted</a></p>

<pre><code>apiVersion: apiserver.config.k8s.io/v1
kind: EncryptionConfiguration
resources:
  - resources:
    - secrets
    providers:
    - identity: {}
    - aesgcm:
        keys:
        - name: key1
          secret: c2VjcmV0IGlzIHNlY3VyZQ==
        - name: key2
          secret: dGhpcyBpcyBwYXNzd29yZA==
    - aescbc:
        keys:
        - name: key1
          secret: c2VjcmV0IGlzIHNlY3VyZQ==
        - name: key2
          secret: dGhpcyBpcyBwYXNzd29yZA==
    - secretbox:
        keys:
        - name: key1
          secret: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
</code></pre>

<p>I have tried to apply this yaml file but the error I get is below.</p>

<blockquote>
  <p>error: unable to recognize "examplesecret.yaml": no matches for kind
  "EncryptionConfiguration" in version "apiserver.config.k8s.io/v1"</p>
</blockquote>

<p>Created aks cluster in azure. Used example encryption yaml file. Expected to be able to create rest secrets. The results I get are unable to create.</p>

Alex Zimmerman
<p>The <code>Kind: EncryptionConfiguration</code> is understood only by the api-server via the flag <code>--encryption-provider-config=</code> (<a href="https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/#options" rel="nofollow noreferrer">ref</a>); in AKS, there’s no way to pass that flag to the api-server, as it’s a managed service. Feel free to request the feature in the <a href="https://feedback.azure.com/forums/914020-azure-kubernetes-service-aks" rel="nofollow noreferrer">public forum</a>.</p>
