Encryption of secrets in yaml files

General Discussions
1

Asking for help? Comment out what you need so we can get more information to help you!

Cluster information:

Kubernetes version:"v1.22.1
Cloud being used: bare metal
Installation method:
Host OS: linux 8
CNI and version:
CRI and version:

I’m extremely new to kubernetes. We currently base64 encode secrets(login/password) in service-secret.yaml files. I’ve been asked to encrypt details in service-secret.yaml files.

To encrypt the details of the service-secret.yaml files, what should I do? Guidance is greatly appreciated.

2

You can encrypt secret data at rest (Encrypting Secret Data at Rest | Kubernetes)

But mind you,once mounted to a pod it is clear text.

3

Can you also please explain who does the decryption of these secrets and what keys are used for decryption in the POD