secret: c2VjcmV0IGlzIHNlY3VyZQ== - aescbc: {} - secretbox: {} KMS Kubernetes secrets: 1.10 KMS plugins ● Encrypt secrets with a locally managed key, which is then encrypted with a centrally KMS 1.10 Envelope Encryption Sequence Master kube-apiserver etcd kms-plugin SECRET KMS 1.10 Kube-ApiServer Generates a DEK Master kube-apiserver etcd kms-plugin SECRET KMS 1.10 Kube-ApiServer etcd kms-plugin Encrypt(DEK) SECRET KMS 1.10 Plugin Forwards to KMS Master kube-apiserver etcd kms-plugin Encrypt(DEK) SECRET Encrypt(DEK) KMS 1.10 KMS Encrypts a DEK Master kube-apiserver

release-X.Y.Z branch based on a tag Release Schedule Release1.13 Branch Supported releases 1.10 1.11 1.12 1.13 Agenda 1. The community 2. How to contribute 3. Versioning 4. The easy way

Confidential Amazon EKS 支持的版本 最新支持: 1.13 即将支持: 1.14 Amazon EKS 将支持Kubernetes三个主要发行版本， Kubernetes 1.10于2019.7.22停止支持 © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential

1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 1.23 1.24 1.25 1.26 1.27 1.28 1.29 1.30 Table of Contents Introduction