Summary

In this chapter, you learned about secrets in Kubernetes. You worked with both the default secret mechanism in Kubernetes as well as with the Azure Key Vault provider for Secrets Store CSI driver.

This chapter started by explaining different secret types in Kubernetes. After that, you used different mechanisms in Kubernetes to create secrets. You then used two methods of accessing those secrets, using them as files or as environment variables.

After that, you created a managed identity and a key vault to experiment with the CSI driver for Key Vault. You installed that on your cluster and used two mechanisms to access secrets in Key Vault: either using files or using environment variables.

In the next chapter, you'll learn more about network security in AKS.