https://rancher.com/ logo
Title
f

freezing-holiday-13112

04/12/2023, 10:22 PM
Is there any configuration in rancher 2 provider for at rest data encryption for etcd?
a

adventurous-battery-36116

04/13/2023, 7:38 PM
It depends on what distro you’re deploying. RKE2 natively encrypts Secrets, to there isn’t anything you have to do there. For K3s, you can use
secrets-encryption: true
in machine_global_config. For RKE, there is a
secrets_encryption_config
as a kube_api server argument.
👍 1