Skip to content
Hallway
0:00 / 0:00

#kubernetessecrets#hashicorpvault#kms

"A better story for Kubernetes secrets" by Seth Vargo

Strange Loop Conference

88K subscribers • 120 videos on Hallway • Conference channel

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • A classic. People kept recommending it from 2019 to 2023.
  • Presented by Seth Vargo, engineer at Google Cloud
  • May be out of date. Uploaded 7 years ago, in an area where tools change fast.

Intermediate. Assumes working knowledge.

4.4K views7 years ago2 recommendations

SecurityCloud and DevOpsKubernetesCryptographyWeb and application security

Seth Vargo explains techniques for securing Kubernetes secrets, including KMS plugins, envelope encryption, and HashiCorp Vault.

Secrets are a key pillar of Kubernetes, but anyone with access to etcd can all the plaintext values! Attendees will learn techniques for securing Kubernetes secrets including encryption, KMS plugins, and tools like HashiCorp Vault, and the tradeoffs of each approach to better secure their clusters. Seth Vargo Google @sethvargo Seth Vargo is an engineer at Google Cloud. Previously he worked at HashiCorp, Chef Software, CustomInk, and some Pittsburgh-based startups. He is the author of Learning Chef and is passionate about reducing inequality in technology. When he is not writing, working on open source, teaching, or speaking at conferences, Seth advises non-profits.

Why it's here

2 people recommend this

What people say. Recommended as an excellent guide to securely managing secrets in Kubernetes clusters.

u/UpandRunningWeeklyin r/kubernetes • Recommends

"A better story for Kubernetes secrets" by Seth Vargo (Conference Talk)
4View on Reddit

u/bugmongerin r/kubernetes • Recommends

On “How do other securely manage their secrets?”

Azure KeyVault, Managed Identities and the Managed Identity feature in AKS. You can alternatively mount Azure KeyVault (or other cloud provider equivalents) using a CSI driver where secrets are part of the file system. link to this video link to this video Seth did a cool talk at DevSecOps a few years back too.
1View on Reddit