I recently saw this page on the ability to encrypt secrets at rest. I am currently running kubernetes on Google Cloud, but I can't figure out how to set it up with the kube-apiserver. Any help is appreciated.
google-cloud-platform
1 Answer
From reading the article, there is an important note where you have to properly restrict permissions on the Master nodes for this to work correctly. At this time, the Master node is not accessible by customers as it is a managed service within GKE.
The only suggestion I can offer at this time if you would like to implement this feature is to create a Cluster from scratch within GCE. This way you will have full control of the cluster, including being able to make changes to the Master node.
