Kubernetes - Encrypting Secrets in etcd. Kubernetes Security - Network Nuts

Learn how to encrypt secrets in etcd. Secrets by default are decoded and are saved in plain text inside etcd database. Learn how to encrypt secrets inside etcd. Certified Kubernetes Security Specialist. Kubernetes security video.

[@silverlancerful]

Glad to see you as in person, you are the motivation for tech- learning people like me.

[@himanshimehta9746]

Thanks for the explaination Sir ..🎉

[@spoketube]

Thank you for describing the steps before performing them. Very helpful. Keep up the great work.

[@farhadkazemipour4247]

Thank you sir for your awesome video, you teach like your teacher in school, with fault prediction and patient 🙏

[@arsadali7754]

Good to see you long time

[@edrichlewis2427]

we have created a key for encryption, where do we have o store that key and incase we have to rotate the key what are the best practices

[@mayanksinghal2432]

What happens if we put multiple keys in the provider. Which key will be used for encryption and which key will be used for decryption?

[@sdubey20789]

Great It's security issue

[@mohammedassadi1052]

Excellent sir. but still if a hacker access my k8 cluster, then he/she can still get my secret by simply running kubectl get command right? So Could you please tell me what is the advantage of doing encryption at rest

[@mohammedassadi1052]

@Abdullah Jandali unfortunately I didn’t get solution :(

[@calpaycetin]

@@abdullahjandali583 I don't know a real answer to this but at least you can keep the secret and etcd in separate hosts, so that an attacker would need to break into 2 different hosts before causing harm.

[@johndurrett3573]

I'm looking for same. Its good to encrypt etcd data and this provides clear walktru to do it; however pods pulling and storing those secrets locally to make their communication calls internally and external from k8 cluster...they are still storing those secrets in plain text for their own use locally.