Can You Keep a Secret? Securely Interacting with Edge Devices in Kubernetes
Talkat Kubernetes on Edge Day Europe 2023 · on Tuesday, 2023-04-18· at 15:20· Hall 7, Room B | Ground Floor | Europe Complex·
summary
Cluster extension Akri is modified so the agent pulls Kubernetes Secrets or ConfigMaps and injects key/value credentials into discovery handlers (demo uses onvif and UDev handlers and notes OPC UA support). A broker pod is scheduled per discovered device, the demo ties one camera (capacity set to 5) to a broker that successfully opens the RTSP stream with username/password from a Secret. Current limitation: agent does not watch Secret updates; roadmap adds live re-discovery, CSI driver support and staged auth roles.
AI-written summary · about
chapters (13)
- 0:00Securely interacting with Edge devices
- 1:07Managing IoT devices at the edge
- 2:55Akuity simplifies IoT device management
- 4:21Akuity’s architecture and workflow
- 5:25Credential management at the edge
- 6:07Secure secret management solution
- 7:54Workflow with secret integration
- 8:37Proof of concept demo
- 11:55Kubernetes secret security
- 12:57Secret management roadmap
- 14:49CNCF projects for security
- 15:32Resources and community
- 16:15Q&A
related talks
27mKeeping Your Agents in Check: Layered Security for Agentic Platforms in Production
23mAkri: Making IoT Devices Accessible to Your Edge Kubernetes Clusters
24mCan You Keep a Secret? On Secret Management in Kubernetes
39mKubernetes IoT Edge Working Group: Edge Device Onboa...
30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay Dharap
43mA Confidential Story of Well-Kept Secrets
42mLeaving no Leaf Device Behind: At the Frontier of Edge Computing
41mOptimizing Secrets Management