Look Who it Was Random video

Turtles All the Way Down: Managing Kubernetes Secrets - Maya Kaczorowski & Alexandr Tcherniakhovski

1,637 views · Published 26 November 2018 · 35:10 · Indexed 29 September 2026

Channel: CNCF [Cloud Native Computing Foundation] · 2018 · Film & Animation

Watch on YouTube

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Turtles All the Way Down: Securely Managing Kubernetes Secrets With Secrets - Maya Kaczorowski & Alexandr Tcherniakhovski, Google

Secrets are the cornerstones of Kubernetes' security model; they are used both by Kubernetes itself (e.g., service accounts) and by users (e.g., API keys). In this talk, we will discuss users’ options for protecting secrets in Kubernetes.  We’ll start with an overview of how secrets are protected and mounted by default in Kubernetes. Then, we’ll cover improvements that have been made in recent releases, including secrets encryption (1.7), and KMS plugins (1.10 Alpha), and how these work with external providers like cloud KMS plugins and HashiCorp Vault. We’ll discuss the tradeoffs of these options based on your requirements. Lastly, we’ll demo how to use a KMS plugin with Kubernetes, and discuss planned improvements to the secrets system in Kubernetes.   You’ll leave with an understanding of your secret management options, and an idea of which one is best for your particular needs.

To learn more click here: https://sched.co/FuKP

More from this channel