Manage CloudLink Encryption for Containers CloudLink encryption for containers enables you to encrypt shared volumes in a Kubernetes cluster. One CloudLink Center instance can support multiple Kubernetes clusters. Each Kubernetes cluster node can have multiple Encryption for Container agents running on it, which includes one Encryption for Containers agent for each driver. Using the CloudLink Center web interface, you can add Kubernetes clusters on which you can deploy containerized applications. CloudLink 7.1 supports the following: Kubernetes version 1.14 to 1.19 Storage types that support Container Storage Interface (CSI): Generic NFS storage PowerScale (NFS) storage PowerFlex block storage Volume types that support CSI: File System provisioning for all storage types Raw Block Volume provisioning for PowerFlex block storage FIPS validated dm-crypt crypto module for container block volume encryption Child TopicsChange Kubernetes server certificate lifetimeUse this procedure to change the maximum lifetime for Kubernetes server certificates. Change Kubernetes server certificateUse this procedure to change the Kubernetes server certificate if required. Change Kubernetes certificates if the hostnames in the certificate are no longer valid. Download Kubernetes server certificateUse this procedure to download the current Kubernetes server certificate. Generate a CSR for KubernetesUse this procedure to generate a certificate signing request (CSR), which involves CloudLink Center generating a private key and signing the request. The request is then fulfilled by a certificate authority (CA) and the final certificate is uploaded to CloudLink Center. Upload Kubernetes server CA-signed certificateUse this procedure to upload a new certificate and an optional private key, the web server restarts and the connection is terminated. After uploading a certificate signed for CloudLink Center, verify the subject, end date, and fingerprint to ensure that it is the correct certificate. Download the Kubernetes Helm packageUse this procedure to download the Kubernetes Helm package. Download the Kubernetes node plugin and dockerfileUse this procedure to download the Kubernetes node plugin and dockerfile. Add a Kubernetes clusterUse this procedure to add a Kubernetes cluster. Modify a Kubernetes clusterUse this procedure to modify a Kubernetes cluster. Generate a new Kubernetes cluster certificateUse this procedure to change the existing Kubernetes cluster certificate by generating a new certificate. Delete a Kubernetes clusterUse this procedure to delete a Kubernetes cluster. View the event history of a Kubernetes clusterUse this procedure to view the event history of a Kubernetes cluster. View Kubernetes nodesUse this procedure to view the Kubernetes nodes. View Kubernetes volumes from Kubernetes clusters or Kubernetes nodesUse this procedure to view the Kubernetes volumes. Accept Kubernetes volumesUse this procedure to accept a pending Kubernetes volume. Supported volume access modes for updating keys for Kubernetes volumesSupported volume access modes for updating keys for Kubernetes volumes. Generate an update key for Kubernetes volumes from Kubernetes clusters or Kubernetes nodesUpdate key generates a new key for the key encryption key. The following procedure explains how to update the key encryption key for Kubernetes volumes.