> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

> KubeEtcdEncryptionConfig configures kube-apiserver etcd encryption rules.

# KubeEtcdEncryptionConfig

```yaml theme={null}
apiVersion: v1alpha1
kind: KubeEtcdEncryptionConfig
# Kubernetes API server [encryption of secret data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
config:
    resources:
        - providers:
            - secretbox:
                keys:
                    - name: key2
                      secret: M-EXAMPLE-SECRET-DO-NOT-USE-w=
            - identity: {}
          resources:
            - secrets
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`config`</td>
      <td>Unstructured</td>
      <td>Kubernetes API server [encryption of secret data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).<br />Key value should be exact contents of the configuration file, excluding the apiVersion and kind fields.</td>

      <td />
    </tr>
  </tbody>
</table>