How to Make Kubernetes Secrets Really… Secret?
summary
Examines Kubernetes Secrets and whether they truly protect sensitive data, comparing alternatives like client-side key encryption of variables, HashiCorp Vault, and using a CSI driver to fetch secrets. Evaluates which option offers the strongest security and integrity while discussing how to choose a solution that balances enterprise needs and operational complexity.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:15Why secrets matter
- 4:00Secrets security
- 7:33Cloud secret managers
- 10:00CSI drivers secret stores
- 11:47External secrets automation
- 13:11Security measures
- 15:20End-to-end encryption
- 16:24Human factor
- 17:48Q&A
related talks
29mHow to Make Kubernetes Secrets Really… Secret?
54mKeeping Kubernetes secrets secret
54mKeeping Kubernetes Secrets
43mSecuring Secrets in the GitOps Era
24mUnlocking the Secrets to Effective Secrets Management in GitOps
39mManaging and securing Kubernetes secrets - Simon Pearce
24mCan You Keep a Secret? On Secret Management in Kubernetes
41mEasy Secrets in Kubernetes: Because I Vault It Well