Skip to content
Hallway
0:00 / 0:00

#cloudsmith#kubernetescredentialprovider

Using a Kubernetes credential provider with Cloudsmith

Cloudsmith

340 subscribers • 1 video on Hallway

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • Presented by Ian Duffy, Senior Site Reliability Engineer at Cloudsmith
  • Made by the vendor. The company whose product it covers made or sponsored it.
  • May be out of date. The tools, versions or practices it shows have likely moved on.

Intermediate. Assumes working knowledge.

430 views1 year ago2 recommendations

Cloud and DevOpsSecurityKubernetesDocker and containersWeb and application security

Ian Duffy explains how to use Kubernetes credential providers to securely pull images from private Cloudsmith registries using short-lived tokens.

Join Ian Duffy, Senior Site Reliability Engineer at Cloudsmith, as he discusses using credential providers in Kubernetes to securely pull images from private repositories. Credential providers are a great new feature that appeared in recent versions of Kubernetes. They allow you to pull images using a short-lived authentication token, which makes them less prone to leakage than long-lived credentials - bolstering security in the software supply chain. #cloudsmith #artifactmanagement #kubernetes #softwaresupplychain

Why it's here

2 people recommend this

u/ExtensionSuccess8539in r/kubernetes • Recommends

Using a Kubernetes credential provider with Cloudsmith Cloudsmith's SRE discusses the use of credential providers in Kubernetes to securely pull images from private repositories. Credential providers are a great new feature that appeared in recent versions of Kubernetes. They allow you to pull images using a short-lived authentication token, which makes them less prone to leakage than long-lived credentials - which improves the overall security of your software supply chain.
10View on Reddit

u/imduffy15in r/kubernetes • Recommends

Wrote a credential provider that makes use of the Service Account Token For Credential Providers alpha feature I wrote a kubernetes credential provider that makes use of the service account token for credential providers alpha feature in kubernetes. Super excited by this as we no longer need to rely on just the node identity and can use the service accounts jwt. This lets kubernetes form trust relationships with private registries like cloudsmith to pull down images without the need of imagePullSecrets.
0View on Reddit