feat(observability): encrypt persistent data

template/stacks/observability/victoria-k8s-stack/manifests/vlogs.yaml

@@ -7,6 +7,9 @@ spec:
   retentionPeriod: "12"
   removePvcAfterDelete: true
   storage:
+    metadata:
+      annotations:
+        everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}       
     accessModes:
       - ReadWriteOnce
     resources:

template/stacks/observability/victoria-k8s-stack/values.yaml

@@ -292,6 +292,9 @@ vmsingle:
       resources:
         requests:
           storage: 20Gi
+      metadata:
+        annotations:
+          everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}                
   ingress:
     # -- Enable deployment of ingress for server component
     enabled: false