• Kubernetes Submit Queue's avatar
    Merge pull request #65223 from jsafrane/aws-inaccessible-key · 18b16be6
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 65187, 65206, 65223, 64752, 65238). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Fixed detection of inaccessible AWS encryption key.
    
    AWS provisioner now checks if created encrypted volume gets "Available" or it gets silently deleted by AWS because StorageClass referenced invalid (e.g. non-existing) KMS key for encryption.
    
    This seems to be the only way how to detect such invalid key, because Kubernetes may not have enough permission to check if the key exists.
    
    **Which issue(s) this PR fixes**
    Fixes #62171
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    AWS now checks for validity of ecryption key when creating encrypted volumes. Dynamic provisioning of encrypted volume may get slower due to these checks.
    ```
    
    /sig aws
    /sig storage
    @kubernetes/sig-aws-misc
    18b16be6
Name
Last commit
Last update
..
conformance Loading commit data...
e2e Loading commit data...
e2e_kubeadm Loading commit data...
e2e_node Loading commit data...
fixtures Loading commit data...
images Loading commit data...
integration Loading commit data...
kubemark Loading commit data...
list Loading commit data...
soak Loading commit data...
typecheck Loading commit data...
utils Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
test_owners.csv Loading commit data...
test_owners.json Loading commit data...