如何使用现有的加密EBS卷作为pod或部署的持久卷

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: encrypted-ebs
provisioner: kubernetes.io/aws-ebs
parameters:
  type: gp2
  encrypted: "true"

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: encrypted-ebs-pvc
spec:
  storageClassName: encrypted-ebs
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi

apiVersion: v1
kind: Pod
metadata:
  name: encrypted-ebs-pod
spec:
  volumes:
    - name: encrypted-ebs-volume
      persistentVolumeClaim:
        claimName: encrypted-ebs-pvc
  containers:
    - name: my-app
      image: my-app-image
      volumeMounts:
        - name: encrypted-ebs-volume
          mountPath: /data