Requirement for managing Secrets, including secure storage and access control
In terms of responsibilities, a Kubernetes cluster has a responsibility to securely contain Secrets and prevent unauthorized access. Every secret that is hosted on Kubernetes has been stored by an individual or an automated process. At some point in time, this secret that now resides on Kubernetes was in another system. This makes it important to store Secrets securely before they reach Kubernetes.
Secure storage
There are various tools dedicated to the purpose of secure storage. Take, for example, HashiCorp Vault, Google Cloud Platform (GCP) Secret Manager, and Amazon Web Services (AWS) Secrets Manager. These are external Secrets management solutions.
The benefit of those solutions is that they can be used as a standalone Secrets management system but can also be used directly from Kubernetes. It is feasible to use secure storage during development or even on CI/CD jobs.
A thing these types of...