Skip to content

Commit da2f4e1

Browse files
committed
Add information for encrypt etcd disk
1 parent 44da128 commit da2f4e1

File tree

2 files changed

+15
-0
lines changed

2 files changed

+15
-0
lines changed

microshift_install_get_ready/microshift-install-get-ready.adoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,12 @@ include::modules/microshift-install-rhel-tools-concepts.adoc[leveloffset=+1]
2020

2121
include::modules/microshift-install-rhde-steps.adoc[leveloffset=+1]
2222

23+
include::modules/microshift-encrypt-etcd-data.adoc[leveloffset=+1]
24+
[role="_additional-resources"]
25+
.Additional resources
26+
27+
* link:https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_storage_devices/encrypting-block-devices-using-luks_managing-storage-devices#luks-disk-encryption_encrypting-block-devices-using-luks[LUKS disk encryption]
28+
2329
[id="additional-resources_microshift-install-get-ready_{context}"]
2430
[role="_additional-resources"]
2531
== Additional resources
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
// Module included in the following assembly:
2+
//
3+
// * microshift_install_get_ready/microshift-install-get-ready.adoc
4+
5+
:_mod-docs-content-type: CONCEPT
6+
[id="microshift-encrypt-etcd-data_{context}"]
7+
= Encrypt etcd data
8+
9+
Kubernetes objects are stored in an etcd database and might contain sensitive data. The etcd data is not encrypted by default. You can encrypt the disk that contains the etcd database by using the Linux Unified Key Setup-on-disk-format (LUKS) management tool for block device encryption.

0 commit comments

Comments
 (0)