Скачать или смотреть Can You Keep a Secret? On Secret Management in Kubernetes by Gal Cohen and Liav Yona

Our apps today need to interface and communicate with many different services, and often authenticate to these. This means just to be able to function in a modern cloud native system, apps constantly need to store and use sensitive data like passwords, access keys, certificates, and other private keys. When it comes to Kubernetes, most organizations use Kubernetes secrets by default to secure private keys and data. However, by design and even in the docs, it is clearly stated that these are stored unencrypted in the API server’s underlying data store etcetera. We have learned the hard way that we need to protect our secrets at all costs, that's why we'll take a deep dive on the Secret Store CSI Drive. Learn how it works under the hood, with multi-credential provider support. We will also demo through code examples how the CDI Driver ensures robust security, least privilege access, and integrates seamlessly into code.