{"id":"etcd-encryption-three-types","text":"etcd encryption supports three types: `aesgcm` (AES-GCM), `aescbc` (AES-CBC), and `identity` (no encryption/default); configured via `spec.encryption.type` on the APIServer resource.","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_and_compliance-e.md","source_url":"","source_hash":"30605b8d27033e9b","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"etcd-encryption-three-types","truth_value":"IN","reason":"premise"}]}}