skip to Main Content

So i’m trying to create a redis cluster using a CMEK and i get this useful error: "Unable to delegate the access of CMEK"

Whats that all about then?

2

Answers


  1. I’m facing the same issue, I tried giving Redis service agent the cloudkms.cryptoKeyEncrypterDecrypter role on the keyring I use and also on the key itself, it didn’t help.
    If you find a solution I’d be glad to know.

    Login or Signup to reply.
  2. Ensure that the user or service account trying to delegate access to CMEK has the necessary permissions. They should also have cloudkms.cryptoKeyVersions.useToEncrypt and

    cloudkms.cryptoKeyVersions.view permissions on the relevant key.

    You might also need to identify and view CMEK configuration errors. See this document.

    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search