From 9a46a77c2d15c66854616aa7c4eb903b01efcb05 Mon Sep 17 00:00:00 2001 From: Tyler Kellen Date: Wed, 8 Nov 2017 16:31:24 -0500 Subject: [PATCH] add note that encryption at rest is supported --- docs/concepts/configuration/secret.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/concepts/configuration/secret.md b/docs/concepts/configuration/secret.md index 9059b2d74f..ee8f85d4b5 100644 --- a/docs/concepts/configuration/secret.md +++ b/docs/concepts/configuration/secret.md @@ -743,3 +743,6 @@ Pod level](#use-case-secret-visible-to-one-container-in-a-pod). by impersonating the kubelet. It is a planned feature to only send secrets to nodes that actually require them, to restrict the impact of a root exploit on a single node. + +**Note:** As of 1.7 [encryption of secret data at rest is supported](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/). +{: .note}