[Question] Should the ca.pem be persisted for further access in KMS? about vault-on-google-kubernetes-engine HOT 2 CLOSED

gcloud kms encrypt \
--location=global \
--keyring=vault \
--key=vault-init \
--project=${PROJECT_ID} \
--plaintext-file=ca.pem \
--ciphertext-file=ca.pem.enc

$ gsutil cp ca.pem.enc gs://${GCS_BUCKET_NAME}
Copying file://ca.pem.enc [Content-Type=application/octet-stream]...
/ [1 files][  1.3 KiB/  1.3 KiB]
Operation completed over 1 objects/1.3 KiB.

gsutil cat gs://${GCS_BUCKET_NAME}/ca.pem.enc | \
  gcloud kms decrypt \
    --project ${PROJECT_ID} \
    --location global \
    --keyring vault \
    --key vault-init \
    --ciphertext-file - \
    --plaintext-file ca.pem