You can now decide for advanced encryption key mechanisms on C8 SaaS when creating new clusters. Besides default GCP disk encryption, you can now choose between Software and Hardware Keys (HSM) managed by Camunda on GCP KMS. You can do this per cluster, meaning every cluster has a dedicated encryption key.
Acceptance criteria
Explanation of encryption key feature (new page)
Cluster creation page: reference and link to new page
Cluster detail view: reference and link to new page
Description
You can now decide for advanced encryption key mechanisms on C8 SaaS when creating new clusters. Besides default GCP disk encryption, you can now choose between Software and Hardware Keys (HSM) managed by Camunda on GCP KMS. You can do this per cluster, meaning every cluster has a dedicated encryption key.
Acceptance criteria
Relates to: https://github.com/camunda/product-hub/issues/1218