AZ567787 - Generally Available: Encryption in Transit for Azure Files NFS Shares in Azure Kubernetes Service (AKS)

Azure Updates

Discussionpowered by zap.ms

Published

Jul 17, 2026

Status

Launched

Timeline

  • May 2025
    Preview
  • July 2026
    General Availability

Product

Azure Files
Azure Kubernetes Service (AKS)

Tag

Security
Feature

Category

Storage
Compute
Containers

Description

Azure Kubernetes Service (AKS) now generally supports Encryption in Transit (EiT) for Azure Files NFS v4.1 volumes through the Azure File CSI driver. With EiT enabled, data transferred between AKS workloads and Azure Files NFS shares is encrypted using TLS, helping customers meet security and compliance requirements for production workloads. The capability is integrated with the AZNFS mount helper and Stunnel and can be enabled through storage class configuration without requiring application changes. This capability is available in all Azure regions that support Azure Files Premium (SSD).

Learn more: