Encryption at Rest
Decrypt One Secret From an RKE2 etcd Snapshot
9 min readSomeone deleted a Secret, or rotated a credential and lost the old value, and the only copy left is in last night’s RKE2 etcd snapshot. Restoring the whole cluster to get one …