diff --git a/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md b/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md index f52feb8742..10d0359965 100644 --- a/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md +++ b/content/en/blog/_posts/2022-08-23-kubernetes-1.25-blog.md @@ -81,7 +81,7 @@ The [CSI Ephemeral Volume](https://github.com/kubernetes/enhancements/tree/maste Promoted the `ServerSideFieldValidation` feature gate to beta (on by default). This allows optionally triggering schema validation on the API server that errors when unknown fields are detected. This allows the removal of client-side validation from kubectl while maintaining the same core functionality of erroring out on requests that contain unknown or invalid fields. -### Introduced KMS v2 +### Introduced KMS v2 API Introduce KMS v2alpha1 API to add performance, rotation, and observability improvements. Encrypt data at rest (ie Kubernetes `Secrets`) with DEK using AES-GCM instead of AES-CBC for kms data encryption. No user action is required. Reads with AES-GCM and AES-CBC will continue to be allowed. See the guide [Using a KMS provider for data encryption](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) for more information.