Securing Kubernetes Secrets

Securing Kubernetes Secrets is a compact hands-on guide to storing and protecting sensitive data in a Kubernetes environment. You'll learn a security-first mindset that is vital for storing and using secrets correctly, and tools and concepts that will help you manage sensitive assets such as certificates, keys, and key rotation.Throughout, you'll tinker with relevant real-world examples. Protect secrets stored in a source code repository and consume them in a Kubernetes cluster, deploy HashiCorp Vault to secure Kubernetes's underlying infrastructure components and applications running on the platform, along with adding layers of security to maintain protection even in the event of a partial breach. By the time you're finished, you'll have a toolbox of techniques that you can apply both as a developer or operations professional. Kubernetes secrets include small and sensitive data like passwords, tokens, and keys. The security defaults of Kubernetes are rarely enough to protect this valuable data, and can leave it--and you--exposed. In this book, you'll learn how to bake security into Kubernetes-based applications right from the start with security best practices and reliable third-party tools like HashiCorp Vault.