// Module included in the following assemblies:
//
// * etcd/KMS_v2/kms-configuring.adoc

:_mod-docs-content-type: PROCEDURE
[id="kms-monitoring-status_{context}"]
= Monitor KMS encryption status

[role="_abstract"]
You can monitor KMS encryption status by using Operator and API server logs to verify successful configuration and detect issues.

.Procedure

. Check the kube-apiserver operator logs for KMS-related events by entering the following command:
+
[source,terminal]
----
$ oc logs -n openshift-kube-apiserver-operator deploy/kube-apiserver-operator | grep -i kms
----

. View API server logs for KMS-related events by entering the following command:
+
[source,terminal]
----
$ oc logs -n openshift-kube-apiserver -l apiserver=true --tail=100 | grep -i kms
----

. Verify the KMS encryption configuration by entering the following command:
+
[source,terminal]
----
$ oc get apiserver cluster -o jsonpath='{.spec.encryption}' | jq
----

[role="_additional-resources"]
.Additional resources

* link:https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/[Kubernetes KMS provider documentation]
