Details
Use ‘aescbc’ encryption provider.
Rationale:
‘aescbc’ is currently the strongest encryption provider, It should be preferred over other providers.
Solution
Follow the Kubernetes documentation and configure a ‘EncryptionConfig’ file. In this file, choose ‘aescbc’ as the encryption provider.
For example,
‘kind: EncryptionConfig
apiVersion: v1
resources:
– resources:
– secrets
providers:
– aescbc:
keys:
– name: key1
secret:’
Impact:
None
Supportive Information
The following resource is also helpful.
This control applies to the following type of system Unix.