Is something like this going to be part of core K8S? Seems like a fundamental feature that you shouldn't have to rely on a third party CRD for.

if someone get access to k8s cluster and decoding the secret?

@KodeKloud

8 ай бұрын

If someone gains access to a Kubernetes cluster and can decode a secret, it's a serious security risk. Kubernetes secrets are base64-encoded but not encrypted, meaning anyone with access can decode them. A compromised secret could lead to unauthorized access or data breaches. Immediate action includes rotating the compromised secret and updating applications using it. Investigate the breach and implement security best practices such as access control, network policies, and regular monitoring. Consider secret management solutions or encryption tools to enhance security. Security in Kubernetes should be a top priority to minimize risks and respond effectively to breaches.

Imperative and declarative way

@KodeKloud

8 ай бұрын

Keep learning with us & stay connected .

Such great instructor!!

@KodeKloud

5 ай бұрын

Hello thank you for watching our video .We are glad that we could help you in your learning !

good stuff.

@KodeKloud

8 ай бұрын

Glad you enjoyed it

Do you see any scenarios when sealed secret operator will not be in situation to decrypt encrypted password and create correct secrete in Kubernetes cluster? Is there any way to store certificates generated by operator somewhere outside the cluster? I guess, if we redeploy the operator it will create new certificate pair.

How would sealed-secrets be used with Terraform?

If one need to deploy the app in a different cluster, the operator public and private key will change, and the sealedsecret stored in git repo will be unusable

What about credentials rotation? This is mentioned on the website but no details provided

@KodeKloud

7 ай бұрын

Hey, please refer to github.com/bitnami-labs/sealed-secrets#secret-rotation

awesome

@KodeKloud

5 ай бұрын

Thanks a lot!

Is this solution applicable to Openshift too?

@KodeKloud

7 ай бұрын

Yes. Sealed Secrets can be used with OpenShift to securely manage and store sensitive data, just as it can be used with a standard Kubernetes cluster. However, make sure to consider OpenShift's specific security features and requirements when implementing it in your OpenShift environment.

I had paid money but my subscription in un-action please fix the issue

@KodeKloud

8 ай бұрын

We apologise for the issue, could you please email us the concern at support@kodekloud.com and we will investigate it.