From ec17a2ab6dd3f619e3aeb4fa385fe5a19438aa85 Mon Sep 17 00:00:00 2001
From: Christopher Hase <Christopher.Hase@telekom.de>
Date: Wed, 25 Jun 2025 10:05:29 +0200
Subject: [PATCH] feat(observaibility): encrypt persistent data

---
 .../observability/victoria-k8s-stack/manifests/vlogs.yaml      | 3 +++
 .../stacks/observability/victoria-k8s-stack/values.yaml        | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/manifests/vlogs.yaml b/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/manifests/vlogs.yaml
index b74e71a..bda4863 100644
--- a/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/manifests/vlogs.yaml
+++ b/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/manifests/vlogs.yaml
@@ -7,6 +7,9 @@ spec:
   retentionPeriod: "12"
   removePvcAfterDelete: true
   storage:
+    metadata:
+      annotations:
+        everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}      
     accessModes:
       - ReadWriteOnce
     resources:
diff --git a/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/values.yaml b/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/values.yaml
index 206241b..a009f9d 100644
--- a/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/values.yaml
+++ b/otc/observability.t09.de/stacks/observability/victoria-k8s-stack/values.yaml
@@ -292,6 +292,9 @@ vmsingle:
       resources:
         requests:
           storage: 20Gi
+      metadata:
+        annotations:
+          everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}                    
   ingress:
     # -- Enable deployment of ingress for server component
     enabled: false