Generally Available: Encryption in Transit for Azure Files NFS Shares in Azure Kubernetes Service (AKS)

Azure Kubernetes Service (AKS) now generally supports Encryption in Transit (EiT) for Azure Files NFS v4.1 volumes through the Azure File CSI driver. With EiT enabled, data transferred between AKS workloads and Azure Files NFS shares is encrypted using TLS, helping customers meet security and compliance requirements for production workloads. The capability is integrated with the AZNFS mount helper and Stunnel and can be enabled through storage class configuration without requiring application changes. This capability is available in all Azure regions that support Azure Files Premium (SSD).

Learn more:

• Create and Manage Persistent Volumes with Azure Files in Azure Kubernetes Service (AKS)
• Redundancy support for SSD Azure file shares | Microsoft Learn
• How to Encrypt Data in Transit for NFS shares
• Use Container Storage Interface (CSI) Drivers on Azure Kubernetes Service (AKS)