Summary
In this chapter, we managed to create an AKS cluster that would be able to read Secrets from Azure Key Vault. We identified the RBAC permissions needed to achieve encrypting and decrypting of the Secrets. We also increased the security by encrypting the Secrets on etcd, using Azure Key Vault as a KMS for Kubernetes. Lastly, we could identify the usage of Azure Key Vault through the audit logs.
In the next chapter, we will focus on another popular cloud provider, Google Cloud Platform. We will explore the secret storage option on GCP and its integration with the Kubernetes offering of GCP, as well as the secret encryption options.