The current state of Kubernetes

With the widespread adoption of Kubernetes, this handbook shows solutions that can leverage Kubernetes native constructs as an internal vault solution as well as external ones from Azure, AWS, GCP, and HashiCorp. A combination of the two might be required to improve the security posture when managing Secrets for both the platform components and applications.

These solutions serve as safeguards to sensitive information stored within Kubernetes clusters and revolve around the principle of storing, managing, and distributing API keys, passwords, and certificates with no or limited security exposure safely and securely.

Native solutions

The Kubernetes project uses Kubernetes Enhancement Proposal (KEP) to document the design changes with the targeted releases for the alpha, beta, and general availability (GA) of these sets of changes.

The KMS provider

KEP has been documenting security changes concerning the native Kubernetes Secrets management...