--- apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: encrypted-storage annotations: storageclass.kubernetes.io/is-default-class: "true" provisioner: gcp.csi.confidential.cloud parameters: type: pd-standard reclaimPolicy: Delete volumeBindingMode: WaitForFirstConsumer