TXT registry records encryption

[vsychov]

Hi guys,

I found that when external-dns use TXT registry, it create TXT records without any encryption, that can be result of leak some information about infrastructure, e.g. internal namespace name and/or project name.

What would you like to be added:
I think, that need extra key (e.g. --txt-encryption-key), for give ability, to encrypt data, stored in TXT records, e.g. via AES.

Why is this needed:
For prevent data leaks.

What do you think?

[vsychov]

Here is example data from TXT, just in case.

"heritage=external-dns,external-dns/owner=%MAY_BE_SENSITIVE%,external-dns/resource=%MAY_BE_SENSITIVE%"

[seanmalloy]

@vsychov this is a duplicate of #854.

/close

[k8s-ci-robot]

@seanmalloy: Closing this issue.

In response to this:

@vsychov this is a duplicate of #854.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.