Table of Contents

1. Challenge

   Generate an encryption key and include it in a Kubernetes data encryption config file.

   To accomplish this task, do the following on the workspace server:

   ENCRYPTION_KEY=$(head -c 32 /dev/urandom | base64)
   
   cat > encryption-config.yaml << EOF
   kind: EncryptionConfig
   apiVersion: v1
   resources:
     - resources:
         - secrets
       providers:
         - aescbc:
             keys:
               - name: key1
                 secret: ${ENCRYPTION_KEY}
         - identity: {}
   EOF
   

2. Challenge

   Copy the file to the Kubernetes controller servers.

   Copy encryption-config.yaml to each Kubernetes controller by running these commands from the workspace server. Be sure to replace the placeholders with the actual IP addresses of the controller servers.

   scp encryption-config.yaml cloud_user@<controller 1 public ip>:~/
   scp encryption-config.yaml cloud_user@<controller 2 public ip>:~/