title: Kubernetes EncryptionConfig Customer Resource Definition
body: <p>My goal is to encrypt a CRD using an EncryptionConfig.</p>
  
  <p>My initial EncryptionConfig only for secrets works.</p>
  
  <pre><code>kind: EncryptionConfig
  apiVersion: v1
  resources:
   - resources:
      - secrets
      providers:
      - aescbc:
          keys:
          - name: key1
            secret: N/A
      - identity: {}
  </code></pre>
  
  <p>Checking the etcd db directly I can confirm that secrets are now encrypted.</p>
  
  <p>I now want to extend this config to encrypt CRDs. My assumption is that CRD to the list of resources in some way would enable the encryption of the CRDs.</p>
  
  <p>I have tried a number of different permutations of the resources array with no luck.</p>
  
  <pre><code>resources:
    - resources:
      - secrets
      - apiextensions.k8s.io/customresourcedefinitions/mycrd
  
  
  resources:
    - resources:
      - secrets
      - customresourcedefinitions
  </code></pre>
  
  <p>None of these work. Is it possible to encrypt CRDs with the EncryptionConfig? If it is, what is the correct way to do it.</p>