How to Propagate Secrets Everywhere with External Secrets Operator (ESO) and Crossplane
Source: YouTube · DevOps & AI Toolkit · published Mar 18, 2024 · 20:31
The video explores a seamless approach to managing secrets across multiple Kubernetes clusters 0:30-0:36, making security transparent to end users while ensuring proper secret propagation.
Key Takeaways:
• Crossplane serves as a control plane cluster that creates and manages other clusters, propagating necessary credentials automatically 2:24-2:35
• The solution copies AWS credentials from the control plane to new clusters, enabling External Secrets operator to authenticate with secret managers 7:31-7:36
• External Secrets operator can pull required secrets from the secret manager into any cluster as specified in the configuration 9:48-9:56
• Database secrets created in the control plane can be pushed to a secret manager and pulled into application clusters where needed 18:31-18:37
This approach makes secrets management nearly invisible to end users while maintaining security best practices 19:52-20:03.
Sources:
- 0:30-0:36 Introduction to secrets management challenges
- 2:24-2:35 Explanation of control plane cluster concept
- 7:31-7:36 Copying credentials between clusters
- 9:48-9:56 Pulling secrets with External Secrets operator
- 18:31-18:37 Database secrets management
- 19:52-20:03 Summary of the complete secrets management solution
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] today I want to talk about Secrets but don't go away don't go away just yet I know that for many Secrets is either boring or you think you already know everything there is to know about managing Secrets I will not talk about obvious secret stuff instead I want to try to answer some less often asked yet important questions how do we make Secrets easy and irrelevant to users how do we propagate Secrets without making them exposed how do we generate secrets in one place but use them in another safely and a few others today's video will be different than what you might expect from Secrets today I want to explore and solve a few problems I was facing not long ago and that I believe I solved without making anyone suffer let me explain the problem before I show you a possible solution I t…