K8s: Amazing Controllers ~ secrets

[AmitKumarDas]

Motivation

This is part of the series of articles on hows & whats of kubernetes controllers. This article talks about kubernetes secrets & controllers (native as well as custom) associated with it.

References:

• https://learnk8s.io/kubernetes-secrets-in-git/

Points To Remember:

• Secrets are sensitive information of your application
• For example: API keys, tokens, database passwords, etc.
• Need to ensure that hackers don't get access to above
• In kubernetes, Secret resource is very similar to ConfigMap
• Notes: K8s did an amazing thing with the name i.e. Secret
• Notes: K8s has a dedicated reconciler/controller for a Secret
• Notes: K8s secret controller implements the encryption_at_rest
• K8s encodes the secret data via base64.
  • Hence this binary data is translated & stored as standard strings
• K8s also provides options to encrypt secret via external KMS system

Extensions to Secret Controller

• SealedSecrets
• HelmSecrets
• Kamus