From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Encrypting secrets at rest

Encrypting secrets at rest - Kubernetes Tutorial

From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Start my 1-month free trial Buy for my team

Encrypting secrets at rest

“

- So, why do we need to encrypt data at rest? Well, ultimately, we store sensitive data in things like the etcd data store. It has all of our configuration information for Kubernetes as well as secrets. We want to be able to prevent breaches and to be able to protect against any unauthorized access and potential hardware theft. And then, of course, compliance is another component that is required that we have encrypted data at rest. So, being able to meet industry regulations like GDPR, HIPAA, PCI, all of this requires this particular control to be in place. Data integrity is another thing that we can address with encryption because it helps us to be able to ensure that the data hasn't been tampered with. We also can use it to prevent insider threats or to reduce the likelihood of insider threats by being able to shield against any unauthorized access from those that may have physical access to the devices or to the servers that are storing this information. And then lastly, it's a…

Contents