Secrets Management in Mesos
summary
Mesos adds first-class secrets in Mesos 1.3 with a modular Secret Resolver interface (examples use Vault); secrets are reference-based (recommended) or value-based (for testing/executor auth), and resolvers fetch values on demand. Image-pull secrets work with the Mesos containerizer (not the Docker containerizer yet). Environment secrets become container env vars; file secrets mount as temporary tmpfs volumes so nothing persists after exit. DC/OS demo shows both env and file secrets resolved and delivered to containers in production usage.
AI-written summary · about
chapters (28)
- 0:00Intro
- 0:43What is a secret
- 1:33How to handle secrets
- 3:09Use cases for secrets
- 7:40Application secrets
- 8:58URI hack
- 10:18Authentication
- 11:54Use Cases
- 13:01Solution
- 13:47Types of Secrets
- 16:22Architecture
- 17:00Image Pool Secrets
- 18:26Workflow
- 19:11Environment
- 20:13Environment Example
- 20:49Volume Protobuf
- 21:44Volume Based Secrets
- 22:32Executive Based Authentication
- 24:42FileBased Secrets
- 31:04Future Work
- 32:47Acknowledgements
- 33:19Design Docs
- 33:42Questions
- 34:11Backup Mechanism
- 34:41Automatic Backups
- 36:44Which bits work with Mesos executor
- 37:49Using the Secret Resolver on the Master
- 39:42Secret Resolver Limitations
related talks
47mManaging your Secrets in a Cloud Environment
26mSecret Management in Kubernetes: The GitOps Way - Benjamin Ritter
38mKeeping Secrets - A Practical Approach to Managing Credentials
24mCan You Keep a Secret? On Secret Management in Kubernetes
01h 02mSecret Management: The Soft Way
34mWhich Vault? Don't tell me your secret(s)!
29m100,000 Different Ways to Manage Secrets in GitOps
30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay Dharap