Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[enhancement] etcd encryption on rest #976

Open
foexle opened this issue Jan 29, 2025 · 0 comments
Open

[enhancement] etcd encryption on rest #976

foexle opened this issue Jan 29, 2025 · 0 comments
Labels
enhancement Small feature, request or improvement suggestion

Comments

@foexle
Copy link

foexle commented Jan 29, 2025

Is your enhancement / feature request related to a problem? Please describe.
The secrets stored in etcd are pretty sensitive since you can provision resources on different providers that relates directly in costs.
So we need to be ensure that those secrets cannot be accessed by third party.

Describe the solution you'd like
One item to achieve this is to encrypt the etcd (encryption on rest), so the actual data store. This would at least prevent to access the data outside of the environment (hypervisor & disk level).

@foexle foexle added the enhancement Small feature, request or improvement suggestion label Jan 29, 2025
@github-project-automation github-project-automation bot moved this to Todo in k0rdent Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Small feature, request or improvement suggestion
Projects
Status: Todo
Development

No branches or pull requests

1 participant