Alex Soto Bueno, Andrew Block

Kubernetes Secrets Management (eBook, ePUB)

• Format: ePub

Produktbeschreibung

Safely manage your secret information like passwords, keys, and certificates in Kubernetes. This practical guide is full of best practices and methods for adding layers of security that will defend the critical data of your applications. In Kubernetes Secrets Management you will find: Strategies for storing secure assets in Kubernetes Cryptographic options and how to apply them in Kubernetes Using the HashiCorp Vault server on Kubernetes for secure secrets storage Managing security with public cloud providers Applying security concepts using tools from the Kubernetes ecosystem End-to-end secrets storage from development to operations Implementing in Kubernetes in CI/CD systems Secrets, like database passwords and API keys, are some of the most important data in your application. Kubernetes Secrets Management reveals how to store these sensitive assets in Kubernetes in a way that's protected against leaks and hacks. You'll learn the default capabilities of Kubernetes secrets, where they're lacking, and alternative options to strengthen applications and infrastructure. Discover a security-first mindset that is vital for storing and using secrets correctly, and tools and concepts that will help you manage sensitive assets such as certificates, keys, and key rotation. About the technology Kubernetes relies on passwords, tokens, keys, certificates, and other sensitive information to keep your system secure. But how do you keep these "secrets" safe? In this concise, practical book you'll learn secrets management techniques that go far beyond the Kubernetes defaults. About the book Kubernetes Secrets Management reveals security best practices and reliable third-party tools for protecting sensitive data in Kubernetes-based systems. In this focused guide, you'll explore relevant, real-world examples like protecting secrets in a code repository, securing keys with HashiCorp Vault, and adding layers to maintain protection after a breach. Along the way, you'll pick up secrets management techniques you can use outside Kubernetes, as well. What's inside Cryptographic options you can apply in Kubernetes Managing security with public cloud providers Secrets storage, from development to production End-to-end Kubernetes secrets management in CI/CD systems About the reader For readers experienced with Kubernetes and CI/CD practices. About the author Alex Soto is a director of developer experience at Red Hat, a Java Champion since 2007, an international speaker, and a teacher at Salle URL University. Andrew Block is a distinguished architect with Red Hat, and an active member of the open-source community. Table of Contents PART 1 SECRETS AND KUBERNETES 1 Kubernetes Secrets 2 An introduction to Kubernetes and Secrets PART 2 MANAGING SECRETS 3 Securely storing Secrets 4 Encrypting data at rest 5 HashiCorp Vault and Kubernetes 6 Accessing cloud secrets stores PART 3 CONTINUOUS INTEGRATION AND CONTINUOUS DELIVERY 7 Kubernetes-native continuous integration and Secrets 8 Kubernetes-native continuous delivery and Secrets

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: Simon + Schuster LLC
• Seitenzahl: 248
• Erscheinungstermin: 14. März 2023
• Englisch
• ISBN-13: 9781638351771
• Artikelnr.: 66916723

Autorenporträt

Andrew Block is a distinguished architect with Red Hat who works with organizations to design and implement solutions leveraging cloud native technologies. He is active in the open-source community as both a presenter and contributor.

Inhaltsangabe

table of contents
PART 1: FOUNDATIONS
READ IN LIVEBOOK1KUBERNETES SECRETS
READ IN LIVEBOOK2REINTRODUCING KUBERNETES & SECRETS
PART 2: SECURING SECRETS
READ IN LIVEBOOK3SECURELY STORING SECRETS
READ IN LIVEBOOK4ENCRYPTION DATA AT REST
READ IN LIVEBOOK5HASHICORP VAULT & KUBERNETES,
READ IN LIVEBOOK6ACCESSING CLOUD SECRET STORES
PART 3: RELEASING APPLICATIONS SECURELY
READ IN LIVEBOOK7KUBERNETES-NATIVE CONTINUOUS INTEGRATION & SECRETS
READ IN LIVEBOOK8KUBERNETES-NATIVE CONTINUOUS DELIVERY & SECRETS
APPENDIXES
READ IN LIVEBOOKAPPENDIX A: KUBERNETES SECRETS
READ IN LIVEBOOKAPPENDIX B: INSTALLING AND CONFIGURING YQ
READ IN LIVEBOOKAPPENDIX C: INSTALLING AND CONFIGURING PIP
READ IN LIVEBOOKAPPENDIX D: INSTALLING AND CONFIGURING GIT
READ IN LIVEBOOKAPPENDIX E: INSTALLING GPG