docs: add encryptionAtRest config in capi-quick-start

Author: supershal

examples/capi-quick-start/aws-cluster-calico-crs.yaml

@@ -47,6 +47,9 @@ spec:
                 baseOS: ${AMI_LOOKUP_BASEOS}
                 format: ${AMI_LOOKUP_FORMAT}
                 org: "${AMI_LOOKUP_ORG}"
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value:
         aws:

examples/capi-quick-start/aws-cluster-calico-helm-addon.yaml

@@ -47,6 +47,9 @@ spec:
                 baseOS: ${AMI_LOOKUP_BASEOS}
                 format: ${AMI_LOOKUP_FORMAT}
                 org: "${AMI_LOOKUP_ORG}"
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value:
         aws:

examples/capi-quick-start/aws-cluster-cilium-crs.yaml

@@ -47,6 +47,9 @@ spec:
                 baseOS: ${AMI_LOOKUP_BASEOS}
                 format: ${AMI_LOOKUP_FORMAT}
                 org: "${AMI_LOOKUP_ORG}"
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value:
         aws:

examples/capi-quick-start/aws-cluster-cilium-helm-addon.yaml

@@ -47,6 +47,9 @@ spec:
                 baseOS: ${AMI_LOOKUP_BASEOS}
                 format: ${AMI_LOOKUP_FORMAT}
                 org: "${AMI_LOOKUP_ORG}"
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value:
         aws:

examples/capi-quick-start/docker-cluster-calico-crs.yaml

@@ -29,6 +29,9 @@ spec:
             strategy: ClusterResourceSet
           nfd:
             strategy: ClusterResourceSet
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value: {}
     version: ${KUBERNETES_VERSION}

examples/capi-quick-start/docker-cluster-calico-helm-addon.yaml

@@ -29,6 +29,9 @@ spec:
             strategy: HelmAddon
           nfd:
             strategy: HelmAddon
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value: {}
     version: ${KUBERNETES_VERSION}

examples/capi-quick-start/docker-cluster-cilium-crs.yaml

@@ -29,6 +29,9 @@ spec:
             strategy: ClusterResourceSet
           nfd:
             strategy: ClusterResourceSet
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value: {}
     version: ${KUBERNETES_VERSION}

examples/capi-quick-start/docker-cluster-cilium-helm-addon.yaml

@@ -29,6 +29,9 @@ spec:
             strategy: HelmAddon
           nfd:
             strategy: HelmAddon
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
     - name: workerConfig
       value: {}
     version: ${KUBERNETES_VERSION}

examples/capi-quick-start/nutanix-cluster-calico-crs.yaml

@@ -103,6 +103,9 @@ spec:
               systemDiskSize: 40Gi
               vcpuSockets: 2
               vcpusPerSocket: 1
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
         imageRegistries:
         - credentials:
             secretRef:

examples/capi-quick-start/nutanix-cluster-calico-helm-addon.yaml

@@ -103,6 +103,9 @@ spec:
               systemDiskSize: 40Gi
               vcpuSockets: 2
               vcpusPerSocket: 1
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
         imageRegistries:
         - credentials:
             secretRef:

examples/capi-quick-start/nutanix-cluster-cilium-crs.yaml

@@ -103,6 +103,9 @@ spec:
               systemDiskSize: 40Gi
               vcpuSockets: 2
               vcpusPerSocket: 1
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
         imageRegistries:
         - credentials:
             secretRef:

examples/capi-quick-start/nutanix-cluster-cilium-helm-addon.yaml

@@ -103,6 +103,9 @@ spec:
               systemDiskSize: 40Gi
               vcpuSockets: 2
               vcpusPerSocket: 1
+        encryptionAtRest:
+          providers:
+          - aescbc: {}
         imageRegistries:
         - credentials:
             secretRef:

hack/examples/bases/aws/cluster/kustomization.yaml.tmpl

@@ -45,6 +45,9 @@ patches:
 - target:
     kind: Cluster
   path: ../../../patches/aws/config-var.yaml
+- target:
+    kind: Cluster
+  path: ../../../patches/encryption.yaml
 
 # Delete the clusterclass-specific resources.
 - target:

hack/examples/bases/docker/cluster/kustomization.yaml.tmpl

@@ -35,3 +35,6 @@ patches:
 - target:
     kind: Cluster
   path: ../../../patches/cluster-autoscaler.yaml
+- target:
+    kind: Cluster
+  path: ../../../patches/encryption.yaml

hack/examples/bases/nutanix/cluster/kustomization.yaml.tmpl

@@ -36,6 +36,9 @@ patches:
 - target:
     kind: Cluster
   path: ../../../patches/nutanix/initialize-variables.yaml
+- target:
+    kind: Cluster
+  path: ../../../patches/encryption.yaml
 
 # Remove Additional Trust Bundle ConfigMap
 - target:

hack/examples/patches/encryption.yaml

@@ -0,0 +1,8 @@
+# Copyright 2024 Nutanix. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+- op: "add"
+  path: "/spec/topology/variables/0/value/encryptionAtRest"
+  value:
+    providers:
+      - aescbc: {}