DevOps Tutorial : Docker Secrets

Hello Friends ,

Welcome to DevOps Tutorial , In this video lecture we will learn docker secrets.

Docker Secrets
Secrets : A secret is a piece of data, such as a password, SSH private key, SSL certificate, or another piece of data that should not be transmitted over a network or stored unencrypted in a Dockerfile or in your application’s source code.

In Docker 1.13 and higher, you can use Docker secrets to centrally manage this data and securely transmit it to only those containers that need access to it.

Docker Secrets is only available in the Swarm mode, so standalone containers can not use this feature.

A given secret is only accessible to those services which have been granted explicit access to it, and only while those service tasks are running.

How Docker Swarm manage the secrets.
When a user adds a new secret to a Swarm cluster, this secret is sent to a manager using a TLS connection.

TLS is a cryptographic protocol that provides communications security over a network by providing communication encryption, privacy and data integrity.

When we have multiple Managers, RAFT manage the secrets on all the managers.

Containers work on mounted decrypted secrets, which store at /run/secrets/secret_name in containers.

User can update a service to grant it access to additional secrets or revoke its access to a given secret at any time.

When container task stops running, the decrypted secrets shared to it are unmounted from the in-memory filesystem for that container and flushed from the node’s memory.



Reference :
https://github.com/Abhishek08/Docker

YOUTUBE PLAYLIST
https://www.youtube.com/channel/UCTPg...


#DockerSwarm #WhatIsDockerSwarm #DockerTutorials #DockerTraining #DevOpsTools #DevOpsTraining #DockerCommands #DockerForBeginners #DockerFreeTutorials #DockerforDevOps
#quarantine2020 #quarantinelearning

#DockerImages #DockerContainers #DockerTutorials #DevOpsTools #DevOpsTraining #DockerFreeTutorials #DockerforDevOps#Docker2020 #DockerTutorial2020
#DockerVolume #DockerBindMount