Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on HashiCorp and Google: easing secret and infrastructure management. Parent comment
That said, there's been a lot progress recently in this area recently. Starting in Kubernetes 1.7, you can optionally encrypt etcd at rest: https://kubernetes.io/docs/tasks/administer-cluster/encrypt-...
You also have a few good choices for the crypto. Two of the choices are Secret Box (XSalsa20 + Poly1305) and AES-GCM with random nonce.
Full list of providers, including info on strength + other considerations:
https://kubernetes.io/docs/tasks/administer-cluster/encrypt-...
There are no comments on this comment yet.
That said, there's been a lot progress recently in this area recently. Starting in Kubernetes 1.7, you can optionally encrypt etcd at rest: https://kubernetes.io/docs/tasks/administer-cluster/encrypt-...
You also have a few good choices for the crypto. Two of the choices are Secret Box (XSalsa20 + Poly1305) and AES-GCM with random nonce.
Full list of providers, including info on strength + other considerations:
https://kubernetes.io/docs/tasks/administer-cluster/encrypt-...