Tag
etcd
Safeguard articles tagged "etcd" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Kubernetes Security
Native Secrets, Sealed Secrets, or Vault: Picking a Kubernetes Secrets Strategy
Kubernetes Secrets are base64-encoded, not encrypted — etcd stores them near-plaintext unless you configure encryption at rest yourself.
Jul 15, 20266 min read
Container Security
How to encrypt Kubernetes secrets at rest
A step-by-step guide to encrypting Kubernetes secrets at rest: choosing a KMS provider, configuring etcd encryption, re-encrypting existing secrets, and verifying it worked.
Feb 17, 20268 min read