Help Center/ Cloud Container Engine/ User Guide/ Clusters/ Upgrading a Cluster/ Troubleshooting for Pre-upgrade Check Exceptions/ Compatibility Check of At-Rest Encryption for Secrets
Updated on 2025-09-05 GMT+08:00
View PDF

Compatibility Check of At-Rest Encryption for Secrets

Check Items

Check whether the target version supports at-rest encryption for secrets. If it does not, clusters that have this feature enabled cannot be upgraded to the target version.

Solution

At-rest encryption for secrets is supported in CCE clusters of v1.27 or later versions. The feature is available in the following versions:
  • v1.27: v1.27.10-r0 or later
  • v1.28: v1.28.8-r0 or later
  • v1.29: v1.29.4-r0 or later
  • Other clusters of later versions

If at-rest encryption for secrets is enabled in the cluster before the upgrade, the target cluster version must also support this feature. Select a target version that supports at-rest encryption for secrets for the upgrade.

Parent Topic: Troubleshooting for Pre-upgrade Check Exceptions