etcd is the key-value database that maintains every Kubernetes resource and the entire cluster state. Without a functioning etcd database, the cluster cannot function. section 3.2.2
Operate etcd with these safeguards:
- Run at least three replicas, and use an odd number so the cluster can elect a majority leader and reduce split-brain risk. section 3.2.2
- Create regular backups outside the cluster so a lost or corrupted database can restore a node or the entire cluster. section 3.2.2
- Protect the database because it contains every Kubernetes resource, including sensitive secrets that may be stored as clear text by default. section 3.2.2

