Loading…
November 13–15, 2018 - Shanghai, China
Click Here For Information & Registration

To view the Chinese version of this schedule please go here.
请点击此处查看中文版本。

我们将为所有主题演讲和分组会议提供同声传译服务。
Simultaneous translation will be provided for all keynote and breakout sessions.
Back To Schedule
Wednesday, November 14 • 14:40 - 15:15
Turtles All the Way Down: Securely Managing Kubernetes Secrets With Secrets - Maya Kaczorowski & Alexandr Tcherniakhovski, Google

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Secrets are the cornerstones of Kubernetes' security model; they are used both by Kubernetes itself (e.g., service accounts) and by users (e.g., API keys). In this talk, we will discuss users’ options for protecting secrets in Kubernetes.

We’ll start with an overview of how secrets are protected and mounted by default in Kubernetes. Then, we’ll cover improvements that have been made in recent releases, including secrets encryption (1.7), and KMS plugins (1.10 Alpha), and how these work with external providers like cloud KMS plugins and HashiCorp Vault. We’ll discuss the tradeoffs of these options based on your requirements. Lastly, we’ll demo how to use a KMS plugin with Kubernetes, and discuss planned improvements to the secrets system in Kubernetes.

You’ll leave with an understanding of your secret management options, and an idea of which one is best for your particular needs.
Speakers
avatar for Maya Kaczorowski

Maya Kaczorowski

Product Manager, N/A
Maya has worked in enterprise security for over a decade. She was mostly recently the Chief Product Officer at Tailscale. Previously, she was at GitHub in software supply chain security, and at Google working on container security, encryption at rest and encryption key management.Maya... Read More →
avatar for Alexandr Tcherniakhovski

Alexandr Tcherniakhovski

Engineer, Google
Alex is a Security Engineer at Google, working on Kubernetes Engine Security team. Alex focuses on the encryption at rest features of Kubernetes. Alex also an owner of encryption of rest feature in Kubernetes. Before Google, Alex worked at Microsoft in various security roles. Outside... Read More →

Turtles all the way down Securely managing Kubernetes Secrets pdf
Wednesday November 14, 2018 14:40 - 15:15 CST
305 B
  Security+Identity+Policy