---
title: "Set cluster secret encryption"
slug: "nks-updatesecretencryption"
updated: 2026-09-17T10:05:54Z
published: 2026-09-17T10:05:54Z
canonical: "api.ncloud-docs.com/nks-updatesecretencryption"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://api.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set cluster secret encryption

Available in VPC

Set [Secret encryption](https://guide.ncloud-docs.com/docs/en/k8s-k8suse-secret-encryption) of a created cluster. The secret encryption feature, once set, can't be turned off or changed.

## Request

The following describes the request format for the endpoint. The request format is as follows:

| Method | URI |
| --- | --- |
| PATCH | /vnks/v2/clusters/{uuid}/secret-encryption (Korea Region) |
| PATCH | /vnks/sgn-v2/clusters/{uuid}/secret-encryption (Singapore Region) |
| PATCH | /vnks/jpn-v2/clusters/{uuid}/secret-encryption (Japan Region) |

### Request headers

For information about the headers common to all Ncloud Kubernetes Service APIs, see [Ncloud Kubernetes Service request headers](/docs/en/compute-vpckubernetesservice#%EC%9A%94%EC%B2%AD%ED%97%A4%EB%8D%94).

### Request path parameters

You can use the following path parameters with your request:

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `uuid` | String | Required | Cluster's UUID - See [Get cluster list](/docs/en/nks-getclusterlist) |

### Request syntax

The request syntax is as follows.

```
{
  "kmsKeyTag": "string"
}
```

### Request body

The following describes the request body.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `kmsKeyTag` | String | Required | Key Management Service's key tag - See [Key Management Service list](https://console.ncloud.com/security-kms/management) |

### Request example

The following is a sample request.

```
curl --location --request PATCH 'https://nks.apigw.ntruss.com/vnks/v2/clusters/{uuid}/secret-encryption' \
--header 'x-ncp-apigw-timestamp: {timestamp}' \
--header 'x-ncp-iam-access-key: {access key}' \
--header 'x-ncp-apigw-signature-v2: {API gateway signature}' \
--data '{
  "kmsKeyTag": "****83e65495374b9cf590a783f442fd50eb48c54eb56774de1ff62bcda4****"
}'
```

## Response

The following describes the response format.

### Response syntax

The response syntax is as follows.

```
{
    "uuid": "string"
}
```

### Response body

The following describes the response body.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `uuid` | String | - | UUID of the cluster |

### Response status codes

For information about the HTTP status codes common to all Ncloud Kubernetes Service APIs, see [Ncloud Kubernetes Service response status codes](/docs/en/compute-vpckubernetesservice#%EC%9D%91%EB%8B%B5%EC%83%81%ED%83%9C%EC%BD%94%EB%93%9C).

### Response example

The following is a sample example.

```
{
    "uuid": "****a20e-e0fb-4dc9-af1b-97fd3f8d****"
}
```