Encrypting Existing Secrets
You add an EncryptionConfiguration with an aescbc provider first and identity last, and start kube-apiserver with --encryption-provider-config. New Secrets appear in etcd prefixed k8s:enc:aescbc:v1:, but an old Secret db-pass is still readable in plain text with etcdctl get. What do you do?
This is a Pro problem
Pro unlocks every lab and quiz, all roadmaps and a full daily plan.
Unlock with Pro