CNCJ - May, 2022

External Secrets Operator: A Cloud Native way to manage your secrets

Summary

For our May meetup, we invited Charl Klein to come talk to us about External Secrets Operator, a Kubernetes operator that integrates external secrets management systems with Kubernetes Secrets.

Managing secrets in Kubernetes can be a cumbersome job. How do you store and rotate your credentials currently in your project?

With External Secrets Operator (ESO for short) we leverage multi-featured solutions like AWS Secret Manager, Azure Key Vault and Hashicorp Vault to manage your sensitive data declaratively and securely. You end up with native Kubernetes secrets in your cluster, synchronized continuously with your external provider.

Charl started the talk with a presentation discussing the need for a tool like ESO and the problems it solves. He then continued to talk about the story behind ESO and how the project came about as well as the current state of the project. This is followed by a brief overview of how ESO works behind the scenes (great Kubernetes refresher!) and a great demo of it in action.

CNCF Event link: External Secrets Operator: A Cloud Native way to manage your secrets

Session Recording

References