Azure Daily 2022 by Gordon

Public preview: Key Management System integration

AKS now supports Key Management System (KMS) plugin integration which enables encryption at the rest of your Kubernetes data in etcd using Azure Key Vault. You can now store secrets in bring your own key (BYOK) encrypted etcd using KMS.

From the Kubernetes documentation on Encrypting Secret Data at Rest:

KMS Plugin for Key Vault is the recommended choice for using a third-party tool for key management. KMS plugin simplifies key rotation, with a new data encryption key (DEK) generated for each encryption, and key encryption key (KEK) rotation controlled by the user.

Features:

  • Use a key in Key Vault for etcd encryption
  • Bring your own keys
  • Provide encryption at rest for secrets stored in etcd

Source: Public preview: Key Management System integration

Azure Kubernetes Service (AKS)
Add to Set
Add to Set
Share
Share on Twitter Share on Facebook Share on LinkedIn Share on Reddit Share on WhatsApp Send via Email Copy Link to Clipboard
Referenced in:

Comments

Copyright © Snippset 2022. All Rights Reserved.