[SUPPORT] v2 timeframe and project status

[WoodyWoodsta]

Hi! I'm interested in introducing encryption at rest for our resources in our cluster. Since it's a production cluster, I'm interested to know whether v2 is still intended to be completed and released, and whether this project is still actively maintained?

[olte-mms]

Hey, we are also interested in the solution, because we are looking for exactly something like this.

[staking-vaas]

We at Telekom MMS are currently looking for exactly this solution,but we are a little confused about the status of the project. We would also like to use this in production and are wondering how current this project still is and when the next major release will be provided.
We would also do open source work and customize the Helm Chart a bit

[FalcoSuessgott]

@staking-vaas You might wanna check https://github.com/FalcoSuessgott/vault-kubernetes-kms. Its still in early stage but already works for encrypting/decrypting secrets. I will work on the health check soon

[romdalf]

Thank you for your issue.

Supporting only KMSv1, the Trousseau project is no longer suitable for use except for educational purposes.
The Kubernetes project retired the KMSv1 in favor of KMSv2, a production-grade replacement. There is no plan (as far as I know) to develop a KMSv2-supported version.

There are other options available like:

• https://github.com/FalcoSuessgott/vault-kubernetes-kms
• https://github.com/beezy-dev/kleidi (I dev'ed this one with contributions from Red Hat/Nokia).

Cheers,
Rom

Note that I am not part of the Ondat org anymore, but I feel that I should provide the community with answers.