--- apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: encrypted-storage annotations: storageclass.kubernetes.io/is-default-class: "true" provisioner: azuredisk.csi.confidential.cloud parameters: skuName: StandardSSD_LRS reclaimPolicy: Delete volumeBindingMode: WaitForFirstConsumer