External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-21 10:57:41 -02:30
Code Issues Packages Projects Releases Wiki Activity

Adjust the table style to make it easier to read (#9731)

Browse Source 
Signed-off-by: Fish-pro <zechun.chen@daocloud.io>
This commit is contained in:
Fish-pro
2023-01-31 16:56:48 +08:00
committed by GitHub
parent 36c6de9abd
commit c0c2cd6e03
6 changed files with 178 additions and 178 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/encrypting-secret-data-at-rest.md
View File

@@ -12,7 +12,7 @@ Alternatively you can use the values `identity`, `aesgcm`, `aescbc` or `kms`.
| Provider | Why we have decided against the value as default |
|----------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| identity | no encryption |
| identity | no encryption |
| aesgcm | Must be rotated every 200k writes |
| aescbc | Not recommended due to CBC's vulnerability to padding oracle attacks. |
| kms | Is the official recommended way, but assumes that a key management service independent of Kubernetes exists, we cannot assume this in all environments, so not a suitable default value. |