#kms

Kubernetes Etcd Encryption at Rest + KMS Design

Protecting Secrets with real cryptography rather than just base64: encryption configuration, KMS integration, and an operational rotation model.