Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
This commit is contained in:
Rita Zhang 2023-02-03 09:24:12 -08:00 коммит произвёл GitHub
Родитель 14d600d358
Коммит 68490e2255
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 1 добавлений и 3 удалений

Просмотреть файл

@ -32,9 +32,7 @@ From the Kubernetes documentation on [Encrypting Secret Data at Rest]:
Azure Kubernetes Service ([AKS]) creates managed, supported Kubernetes clusters on Azure.
To try out the KMS plugin for Key Vault on AKS, follow this [doc](https://docs.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption).
AKS does encrypt secrets at rest by default, but in that case keys are managed by the service and users cannot bring their own.
To enable encryption at rest for Kubernetes resources in etcd, check out the KMS plugin for Key Vault on AKS feature in this [doc](https://docs.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption).
### Setting up KMS Plugin manually