Skip to content

Commit 1d313a1

Browse files
committed
(WIP) Test: Verify if secrets are encrypted
1 parent 77b06ce commit 1d313a1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

RATIONALE.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -383,4 +383,4 @@ closing watches for ConfigMaps marked as immutable.*"
383383
> *Tiller, found in Helm v2, has known security challenges. It requires administrative privileges and acts as a shared resource accessible to any authenticated user. Tiller can lead to privilege escalation as restricted users can impact other users. It is recommend to use Helm v3+ which does not contain Tiller for these reasons
384384
385385
#### *Check if secrets are encrypted on the plaform*: [Kubescape secret/etcd](docs/LIST_OF_TESTS.md#kubescape-secret-etcd)
386-
> *Secret encryption is not enabled by default in kubernetes environment. As secrets contains sensitive information, it is recommended to encrypt these values. For encrypting secret in etcd, we are using encryption in rest, this will cause, that there wont be secret key value in plain text format anymore in etcd.
386+
> *Secret encryption is not enabled by default in kubernetes environment. As secrets contains sensitive information, it is recommended to encrypt these values. For encrypting secret in etcd, we are using encryption in rest, this will cause, that there will not be secret key value in plain text format anymore in etcd.

0 commit comments

Comments
 (0)