News for hackers. Stuff that matters.

A comment on Kubernetes Security – Best Practice Guide. Parent comment

Re:Kubernetes Security – Best Practice Guide by jeffstephens on Thursday April 05, 2018 @01:53PM (#16767193)
Kubernetes has great built-in support for injecting secrets as either environment variables (like API keys) or volume mounts (for things like certs). You can configure them to be encrypted at rest as well.

https://kubernetes.io/docs/concepts/configuration/secret/

https://kubernetes.io/docs/tasks/administer-cluster/encrypt-...

[ Parent | on HN ]
Re:Kubernetes Security – Best Practice Guide by raesene9 on Thursday April 05, 2018 @03:00PM (#16767924)
one thing to watch there is that you have to be using a relatively recent version (1.9+ IIRC) to get encrypted at rest for secrets in base Kubernetes
[ Parent | on HN ]