Secret Management on SL Notebookhttps://slnotes.blog.castrillon.ch/k8s/secretmanagement/Recent content in Secret Management on SL NotebookHugo -- gohugo.ioSat, 12 Sep 2026 11:08:59 +0200Encryption at Resthttps://slnotes.blog.castrillon.ch/k8s/secretmanagement/enc_at_rest/Sat, 12 Sep 2026 11:08:59 +0200https://slnotes.blog.castrillon.ch/k8s/secretmanagement/enc_at_rest/When dealing with Kubernetes secrets, the values are not only stored in the definitions used to create the resources. Critically, they are also stored in the etcd store that the cluster uses for configuration. By default, secret values in this store can just be read directly which is a vulnerability. K8s offers a process to encrypt these values: https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/ THis process involves: Creating an EncryptionConfiguration object In here it can be determined: WHich resources to encrypt at rest (e.