From ed611f19654ed9154d59b56398cdbae1c07bcb77 Mon Sep 17 00:00:00 2001
From: John Riendeau <riendeau@us.ibm.com>
Date: Wed, 21 Feb 2024 07:48:54 -0600
Subject: [PATCH] Disable KMS automatic config reload

---
 assets/kube-apiserver/kube-apiserver-deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/assets/kube-apiserver/kube-apiserver-deployment.yaml b/assets/kube-apiserver/kube-apiserver-deployment.yaml
index a44f44feb..4a5ef1749 100644
--- a/assets/kube-apiserver/kube-apiserver-deployment.yaml
+++ b/assets/kube-apiserver/kube-apiserver-deployment.yaml
@@ -158,6 +158,7 @@ spec:
         - "--openshift-config=/etc/kubernetes/apiserver-config/config.yaml"
 {{- if .KPInfo }}
         - "--encryption-provider-config=/etc/kubernetes/kms-config/config.yaml"
+        - "--encryption-provider-config-automatic-reload=false"
 {{- end }}
 {{- if .KonnectivityEnabled }}
         - "--egress-selector-config-file=/etc/kubernetes/apiserver-egress-config/egress-config.yaml"