Kubernetes 1.7 added the concept of a Provider to encrypt secrets to/from etcd3: https://docs.google.com/document/d/1lFhPLlvkCo3XFC2xFDPSn0jAGpqKcCCZaNsBAv8zFd

Kubernetes 1.7 added the concept of a Provider to encrypt secrets to/from etcd3: https://docs.google.com/document/d/1lFhPLlvkCo3XFC2xFDPSn0jAGpqKcCCZaNsBAv8zFdE/edit# https://docs.google.com/document/d/1lFhPLlvkCo3XFC2xFDPSn0jA... https://github.com/kubernetes/kubernetes/pull/41939 https://github.com/kubernetes/kubernetes/pull/41939 https://github.com/kubernetes/kubernetes/pull/49350 https://github.com/kubernetes/kubernetes/pull/49350 etc. There is an implementation to use Hashicorp's Vault to encrypt secrets (using this functionality) which looks quite nice actually: https://docs.google.com/document/d/15-baW4i7qws1yxxIYjHXqKpk259ebauQbECQCpPD308/edit# https://docs.google.com/document/d/15-baW4i7qws1yxxIYjHXqKpk...