Encryption at Rest on Support Toolshttps://support.tools/tags/encryption-at-rest/Recent content in Encryption at Rest on Support ToolsHugoen-USFri, 23 Oct 2026 00:00:00 +0000Decrypt One Secret From an RKE2 etcd Snapshothttps://support.tools/post/extracting-decrypting-secret-etcd-snapshot-rke2/Wed, 04 Sep 2024 04:48:35 -0500https://support.tools/post/extracting-decrypting-secret-etcd-snapshot-rke2/<p>Someone deleted a Secret, or rotated a credential and lost the old value, and the only copy left is in last night&rsquo;s RKE2 etcd snapshot. Restoring the whole cluster to get one object back is out of the question. This guide restores the snapshot into a scratch etcd that has nothing to do with the live cluster, reads the one key you need, and decrypts it, because on RKE2 every Secret in etcd is encrypted at rest.</p>