Summary

In this chapter, we had a deep dive into Secrets management on Google Cloud and GKE. We learned about Secret Manager, the GCP offering for Secrets management, and the features that come with it such as availability, auditing, and integration with other Google Cloud components. We then proceeded to provision a Kubernetes Engine on GCP using the GKE offering and integrated it with Secret Manager. Then we used KMS to encrypt the Secrets on Kubernetes at rest. Finally, by using Google Cloud monitoring, we managed to keep track of the secret operations on Kubernetes, Secret Manager, and the KMS. In the next chapter, we will focus on the non-cloud-based secret managers: HashiCorp Vault and CyberArk Conjur.