4 Encrypting Data at Rest

Apache Kafka & Strimzi · 3:50

Listen on 93

Lyrics

[Verse 1]
When your Kafka data sleeps at night
On the disks where secrets hide
Encryption guards what's stored inside
From prying eyes that shouldn't pry
etcd holds your cluster state
Every secret, every key
Without encryption at the gate
Your data's not as safe as it could be

[Chorus]
Lock it down, encrypt at rest
K-eight-s level, that's the best
etcd secrets, CSI drives
Keep your Kafka data alive
Cloud provider, disk encryption
AWS, Azure, GCP protection
Lock it down, encrypt at rest
Data sleeping safely blessed

[Verse 2]
Kubernetes secrets engine runs
etcd encryption at the core
AES-CBC or AES-GCM for fun
Your cluster secrets now secure
CSI drivers take the wheel
Storage classes define the way
Container Storage Interface deal
Encrypts volumes where Kafka stays

[Chorus]
Lock it down, encrypt at rest
K-eight-s level, that's the best
etcd secrets, CSI drives
Keep your Kafka data alive
Cloud provider, disk encryption
AWS, Azure, GCP protection
Lock it down, encrypt at rest
Data sleeping safely blessed

[Bridge]
AWS EBS volumes encrypted tight
Azure Disk with keys so bright
GCP Persistent Disks aligned
Multi-layered, peace of mind
Key rotation, access control
Cloud provider plays their role
While Kubernetes does its part
Encryption layers, work of art

[Verse 3]
Configure encryption config files
Set your providers in a row
KMS integration all the while
Cloud-native security flow
Storage classes marked encrypted
CSI parameters set right
Your Kafka topics are protected
Even when they sleep at night

[Chorus]
Lock it down, encrypt at rest
K-eight-s level, that's the best
etcd secrets, CSI drives
Keep your Kafka data alive
Cloud provider, disk encryption
AWS, Azure, GCP protection
Lock it down, encrypt at rest
Data sleeping safely blessed

[Outro]
From etcd to the storage layer
Every bit protected well
Multi-cloud encryption prayer
Keeps your secrets safe to tell
Lock it down, encrypt at rest
Strimzi Kafka at its best

← 3 KRaft Mode (ZooKeeper-less Kafka) | 1 TLS Encryption →