From 68490e22557a71679d80675811761222621f0ddb Mon Sep 17 00:00:00 2001 From: Rita Zhang Date: Fri, 3 Feb 2023 09:24:12 -0800 Subject: [PATCH] docs: update AKS feature (#201) Signed-off-by: Rita Zhang --- README.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/README.md b/README.md index 3850d5c..bbe229c 100644 --- a/README.md +++ b/README.md @@ -32,9 +32,7 @@ From the Kubernetes documentation on [Encrypting Secret Data at Rest]: Azure Kubernetes Service ([AKS]) creates managed, supported Kubernetes clusters on Azure. -To try out the KMS plugin for Key Vault on AKS, follow this [doc](https://docs.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption). - -AKS does encrypt secrets at rest by default, but in that case keys are managed by the service and users cannot bring their own. +To enable encryption at rest for Kubernetes resources in etcd, check out the KMS plugin for Key Vault on AKS feature in this [doc](https://docs.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption). ### Setting up KMS Plugin manually