Qualities for securely managing Secrets
As we have seen, there are certain qualities when it comes to storing external Secrets. In this chapter, we took a deep dive into the HashiCorp Vault and how it integrates with Kubernetes. We also had a look at another Secrets management provider, Conjur.
A secret manager needs to have certain qualities:
- High availability
- Encryption of data
- Secure access
- Versioning
- RBAC
- Integration with Kubernetes
- Auditing
Those qualities are essential to ensuring the secure and robust storage of an application’s Secrets.
High availability
High availability is required to ensure our data is safe. It can protect us from losing any data in case of a service outage. It ensures business continuity. External secret stores such as Vault and Conjur achieve high availability by utilizing Raft, the popular consensus method. By having a consensus method, the cluster approach for availability is feasible; we can add...
