Andrey Smirnov 4f11f021de

feat: implement etcd encryption config (kube-apiserver) ...

This replaces existing fixed field for etcd encryption with a completely
flexible configuration which exactly matches upstream kube-apiserver
configuration.

The default machine configuration generated still retains previous
defaults.

New configuration allows:

* rotating etcd encryption secrets
* implementing any encryption policies (e.g. encrypting configmaps).

Fixes #10899

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>

2026-05-04 19:35:23 +04:00

..

secrets.proto

feat: implement etcd encryption config (kube-apiserver)

2026-05-04 19:35:23 +04:00