Description
Book SynopsisSafely store secret information like passwords, keys, and certificates in Kubernetes. In this practical guide, you'll discover methods for adding layers of security that will defend the critical data of your applications.
In
Securing Kubernetes Secrets you will find:
- Strategies for storing secure assets in Kubernetes
- Cryptographic options and how to apply them in Kubernetes
- Using the HashiCorp Vault server on Kubernetes for secure secrets storage
- Managing security with public cloud providers
- Applying security concepts using tools from the Kubernetes ecosystem
- End-to-end secrets storage from development to operations
- Implementing in Kubernetes in CI/CD systems
Secrets, like database passwords and API keys, are some of the most important data in your application.
Securing Kubernetes Secrets reveals how to store these sensitive assets in Kubernetes in a way that's protected against leaks and hacks. You'll learn about the default capabilities of Kubernetes secrets, where they're lacking, and alternative options to strengthen applications and infrastructure.
Kubernetes secrets include small and sensitive data like passwords, tokens, and keys. The security defaults of Kubernetes are rarely enough to protect this valuable data, and can leave it—and you—exposed. In this book, you'll learn how to bake security into Kubernetes-based applications right from the start with security best practices and reliable third-party tools like HashiCorp Vault
Trade Review'I learnt a lot about how to do secrets management in Kubernetes. I'm also very pleased and embarrassed (as a Kubernetes trainer) to say that I picked up a few tips & tricks about Kubernetes itself along the way!'
Michael Bright
'It is an absolute must to read this book.'
Werner Dijkerman
'I'm currently implementing a secretes management solution in kubernetes, and wish I had this text at the beginning of this journey.'
Milorad Imbra
'Provides insight into a complex topic even if you are not an expert in Kubernetes, DevOps or IT Security.'
Atila Kaya Table of Contentstable of contents PART 1: FOUNDATIONS READ IN LIVEBOOK 1KUBERNETES SECRETS READ IN LIVEBOOK 2REINTRODUCING KUBERNETES & SECRETS PART 2: SECURING SECRETS READ IN LIVEBOOK 3SECURELY STORING SECRETS READ IN LIVEBOOK 4ENCRYPTION DATA AT REST READ IN LIVEBOOK 5HASHICORP VAULT & KUBERNETES, READ IN LIVEBOOK 6ACCESSING CLOUD SECRET STORES PART 3: RELEASING APPLICATIONS SECURELY READ IN LIVEBOOK 7KUBERNETES-NATIVE CONTINUOUS INTEGRATION & SECRETS READ IN LIVEBOOK 8KUBERNETES-NATIVE CONTINUOUS DELIVERY & SECRETS APPENDIXES READ IN LIVEBOOK APPENDIX A: KUBERNETES SECRETS READ IN LIVEBOOK APPENDIX B: INSTALLING AND CONFIGURING YQ READ IN LIVEBOOK APPENDIX C: INSTALLING AND CONFIGURING PIP READ IN LIVEBOOK APPENDIX D: INSTALLING AND CONFIGURING GIT READ IN LIVEBOOK APPENDIX E: INSTALLING GPG
