AZ499294 - Public Preview: Encryption in Transit for Azure Files NFS shares in AKS

Azure Updates

Discussionpowered by zap.ms

Published

Aug 6, 2025

Status

In preview

Timeline

  • August 2025
    Preview

Product

Azure Kubernetes Service (AKS)

Tag

Features

Category

Compute
Containers

Description

Azure Kubernetes Service (AKS) now supports Encryption in Transit (EiT) for Azure Files NFS v4.1 volumes via the Azure File CSI driver. 

 

This builds on the recent General Availability (GA) of EiT for Azure Files NFS shares in June, which introduced TLS 1.3-based encryption to secure data in transit across supported regions.  

 

Now, AKS customers can benefit from the same enterprise-grade security for their containerized workloads. 

 

What’s New in AKS 

  • Preview support for EiT in AKS 1.33+ clusters using the Azure File CSI driver. 
  • Built-in integration with the AZNFS mount helper and Stunnel for seamless TLS encryption. 
  • No application changes required—after enabling in storage class, EiT works transparently with your existing NFS workloads. 

Learn more.