|
|
|
|
|
by erickt
3218 days ago
|
|
> Kubernetes "secrets" aren't actually...well...secret. They're stored unencrypted in etcd with no ACLs. You must go outside the Kubernetes system to do this. They are in progress towards encrypting at rest the etcd database. You can experimentally turn it on by following this doc: https://kubernetes.io/docs/tasks/administer-cluster/encrypt-... |
|