Cloud Native
Security Talks RSS

KubeCon Europe 2019

Secrets Store CSI Driver-Bring Your Own Enterprise Secrets Store to K8s

Rita Zhang, Microsoft & Anubhav Mishra, HashiCorp

Abstract

So you are running your applications in Kubernetes, but you already have a solution for managing and storing all your application secrets. How do you tell Kubernetes to use the same source of truth for secrets? Meet Secrets Store CSI driver, a simple way to retrieve sensitive data from enterprise-grade external stores such as Azure Key Vault and HashiCorp Vault using volumes. Learn how to use Secrets Store CSI Driver to mount secrets, keys, and certs stored in common external stores into their Kubernetes applications using a volume. We will also look at how you can add your own external secret store via the provider interface.

More from KubeCon Europe 2019

Open in the index →
  1. Using eBPF to Bring Kubernetes-Aware Security to the Linux KernelDan Wendlandt, Isovalent 2019-05-21
  2. Portable, Universal Single Sign-On for Your ClustersMiguel Martinez, Bitnami 2019-05-21
  3. Kubernetes + Encrypted Memory = Security * PrivacyHarshal Patil & Pradipta Banerjee, IBM 2019-05-21
  4. Fine-Grained Permissions in Kubernetes: What’s Missing, and How to Fix ThatVallery Lancey, Lyft & Seth McCombs, Triller 2019-05-21
  5. Envoy SDS: Fortifying Istio SecurityYonggang Liu & Quanjie Lin, Google 2019-05-21
  6. Zero Trust Service Mesh with Calico, SPIRE, and EnvoyShaun Crampton, Tigera & Evan Gilman, Scytale 2019-05-22
  7. Smarter Kubernetes Access Control: A Simpler Approach to AuthRob Scott, ReactiveOps 2019-05-22
  8. Inside the CNCF Project Security ReviewsJustin Cormack, Docker 2019-05-22
  9. Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105Ian Coldwater, Heroku 2019-05-22
  10. Container Forensics: What to Do When Your Cluster is a ClusterMaya Kaczorowski & Ann Wallace, Google 2019-05-22
  11. Caller ID in KubernetesMichael Danese, Google 2019-05-22
  12. Uber x Security: Why and How We Built Our Workload Identity PlatformTyler Julian, Uber & Daniel Feldman, Scytale 2019-05-23
  13. Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIREEvan Gilman, Scytale, Inc. 2019-05-23
  14. Securing Kubernetes with Trusted Platform Module (TPM)Alex Tcherniakhovski & Andrew Lytvynov, Google 2019-05-23
  15. Protecting the Data LakeAsh Narkar, Styra, Inc 2019-05-23
  16. DIY Pen-Testing for Your Kubernetes ClusterLiz Rice, Aqua Security 2019-05-23