medium10 pts · first answer countsdevsecopskubernetesencryption

KMS encryption for Kubernetes Secrets

You enable KMS encryption at rest for Secrets on your cluster. How does envelope encryption work in this setup?

A.KMS stores every Secret and etcd keeps only a linkB.Each Secret is base64 encoded twice before savingC.A data key encrypts each Secret; KMS encrypts the data keyD.The API server sends Secrets to KMS on every read

Discussion 0

Join free to post in the discussion.

KMS encryption for Kubernetes Secrets

Discussion 0

Related questions