Red Hat OpenShift Container Platform

You can monitor KMS encryption status by using Operator and API server logs to verify successful configuration and detect issues.

Procedure

Check the kube-apiserver operator logs for KMS-related events by entering the following command:
```
$ oc logs -n openshift-kube-apiserver-operator deploy/kube-apiserver-operator | grep -i kms
```

View API server logs for KMS-related events by entering the following command:

$ oc logs -n openshift-kube-apiserver -l apiserver=true --tail=100 | grep -i kms

Verify the KMS encryption configuration by entering the following command:
```
$ oc get apiserver cluster -o jsonpath='{.spec.encryption}' | jq
```

Additional resources