Documentation how to use EncryptionConfiguration for Rancher Backups with AWS KMS on AWS EKS clusters

[herrbpl]

Summary:
There are example provisioned about EncryptionConfiguration how to use non-KMS EncryptionConfiguration - https://ranchermanager.docs.rancher.com/v2.6/reference-guides/backup-restore-configuration/examples#example-encryptionconfiguration

However, there is no information how to use KMS plugin on AWS EKS clusters within EncryptionConfiguration. AWS EKS controlplane does not expose this information. Do I need to deploy my own encryption provider? Can I use one that runs on EKS control plane? How to configure this? Working example of such EncryptionConfig would be very welcome.

[herrbpl]

Apparently only way to use custom KMS for encryption then is to run KMS plugin on same host as rancher-backup operator and mount unix socket to both KMS plugin and rancher-backup operator?

[mantosh-mariner]

Hi, I would like to work on this issue. Could you assign it to me?

[btat]

@mantosh-mariner Thank you for volunteering to help with this. I've assigned this issue to you as requested.