Kubernetes Secrets Management with ESO | Kubernetes Tutorial

Kubernetes Secrets Management with ESO | Kubernetes Tutorial | KodeKloud

Рет қаралды 7,410

Күн бұрын

Join Sanjeev from KodeKloud as he delves into ESO(External Secrets Operator), a powerful tool for effectively managing secrets within Kubernetes clusters. Discover the challenges with default Kubernetes secrets, learn how ESO addresses security concerns, and explore its seamless integration with external APIs like AWS Secrets Manager. Follow along as we demonstrate the installation, configuration, and practical usage of ESO through this comprehensive tutorial.
🆓Join our Slack Community for FREE: kode.wiki/JoinOurSlackCommunity
⬇️Below are the topics we are going to discuss in this ESO Tutorial video:
00:00 - Introduction
00:30 - Why do we need External Secrets Operator?
02:36 - What is External Secret Operator?
03:38 - How does External Secret Operator works?
08:48 - Installation of ESO using Helm
10:55 - Configuring a Secret using AWS Secret Manager
14:43 - Creating Secret Store
24:19 - Conclusion
✅Start your Cloud Computing Career Now - kode.wiki/CloudLearningPath_YT
We have various Learning Paths to help you choose your next step and shape your DevOps & Cloud Career.
Check out our learning paths at KodeKloud to get started:
▶️ Cloud Computing: kode.wiki/CloudLearningPath_YT
▶️ Kubernetes: bit.ly/KubernetesLearningPath
▶️AWS: kode.wiki/awslearningpath_yt
▶️Azure: kode.wiki/azurelearningpath_yt
▶️Google Cloud Platform: kode.wiki/GCPlearningpath_YT
▶️ Linux: bit.ly/LinuxLearningPath
▶️ DevOps Learning Path: bit.ly/DevOpsLearningPath-YT
#eso #kubernetessecrets #kubernetestutorial #externalsecretsoperator #aws #kodekloud
For more updates on courses and tips, follow us on:
🌐 Website: kodekloud.com/
🌐 LinkedIn: / kodekloud
🌐 Twitter: / kodekloudhq
🌐 Facebook: / kodekloudhq
🌐 Instagram: / kodekloud
🌐 Blog: kodekloud.com/blog/

Пікірлер: 30

@hyderabadperlmongers3654 2 ай бұрын

This is best so far on ESO :) , stright to point , no drama :) loved it

@KodeKloud 27 күн бұрын

Hello, thank you for watching our video. We are glad that you liked our video. Do subscribe and stay connected with us. Cheers :)

@user-wi6bs1ml7j 29 күн бұрын

Straight to the point. Thank you. No BS.

@KodeKloud 27 күн бұрын

Glad you appreciated the direct approach! We believe in cutting through the noise to deliver value. Stay tuned for more straightforward content! 🚀

@Pyrusmalus 3 ай бұрын

Thanks for the detailed demo

@KodeKloud 3 ай бұрын

Our pleasure!

@rajenderprasad1193 3 ай бұрын

Great stuff.. thanks KodeCloud

@KodeKloud 3 ай бұрын

You're welcome!

@peterjakubik 3 ай бұрын

Just in time when I need it. Nice snowboards 😊

@KodeKloud 3 ай бұрын

Glad you like them!

@salborough2 Ай бұрын

Great video - thanks so much :)

@KodeKloud 27 күн бұрын

Glad it was helpful!

@MichaelaMarkou 3 ай бұрын

Great stuff! 🎉

@KodeKloud 3 ай бұрын

Keep learning with us .Stay connected with our channel and team :) . Do subscribe the channel for more updates : )

@iga3725 2 ай бұрын

good explanation! Thx

@KodeKloud 27 күн бұрын

Glad it was helpful!

@rajrehan2710 Ай бұрын

This is best so far. Awesome tool, but how do we encrypt those secrets?

@praveenkore842 3 ай бұрын

Nice 👍

@KodeKloud 3 ай бұрын

Keep learning with us .Stay connected with our channel and team :) . Do subscribe the channel for more updates : )

@mohammedbanabila8515 3 ай бұрын

can be use identity provider odic with external secret operator ?

@mohammedbanabila8515 3 ай бұрын

can be use IRSA serviceaccount with secretstore rather than adding qccess and sec key ?

@yogithakakarla1716 2 ай бұрын

Can we do this ? Because we cannot use accesskey and secret key And also storing accesskey and secret key in that secret is also risky right

@kashifkm9079 3 ай бұрын

Kubeseal also good tool to overcome the describe challenges

@KodeKloud 3 ай бұрын

Thank you so much : ) We are glad to be a part of your learning journey

@stratfanstl 3 ай бұрын

Good demo of c the flow of this new middleman process. It solves the problem of defining credentials in YAML files that might become accidentally checked in to a source code repository. But it doesn't solve the other problem with using the internal secrets mechanism of Kubernetes. As of about 2022, there was still an inherent flaw with secrets within a K cluster in that the underlying data was physically persisted on disk on the main nodes in a way that allowed access and decoding as root. I think demos of Hashicorp Vault at various conferences demonstrated this flaw. Since this flow fetches the external "truth" of a secret then persists it as an internal secret, is the secret any safer? It is safe from being compromised by source code management mixups but it is still not safe at run time. Or has Kubernetes fixed that flaw?

@donalddev-fp3ym 3 ай бұрын

I personally prefer the flow or akv2k8s on the azure side that also comes with an injector

@vpatanjali 3 ай бұрын

Can you prepare a full video with terraform IAC. I needed this very badly

@KodeKloud 3 ай бұрын

Hey, thank you for watching our video. We will definitely look into your suggestions. Do subscribe and stay tuned for updates on our channel. Cheers :)