Securing Secrets in AKS using Key Vault

Learn how to add more security to your Kubernetes cluster. We'll use AAD Pod Identity and Secret Store CSI provider for Key Vault to retrieve database login and password from Azure Key Vault.
Link for the scripts on github:
github.com/HoussemDellai/aks-...
Follow me on twitter: / houssemdellai

[@gagikkyurkchyan]

Excellent and clear summary :) It made a lot of sense. I would love to see all of these from DevOps perspective - using ARM templates to deploy all of the necessary resources

[@madhusudhananmohan232]

Super explaination, Houssem ! The Git code was very straight forward, one of the best articles found in net.

[@jasonchen2674]

Excellent and insightful lecture. Thank you. Definitely I can apply what I learned to my project immediately.

[@vijayt7857]

Wow awesome... Loved it bcz of ur simple and effective explanation houseem...👍👍 Thank you n more power to you 💪 💪

[@jervievitriolo6650]

Hi Houssem, thanks for all your effort in creating this very helpful content, I would love to see if you could provide another one with terraform example and sample application

[@abdops]

Nice work pal. thank you. The problem is the amount of TH-cam ads that interrupting the video is god damn high! I forget what you were saying between the ads :D

[@HoussemAydi]

good job !!

[@smartaquarius2021]

How to update the values if secret update in key vault. Do we have to manually restart the pod having volume details.

[@cuongluucaovjp7251]

Great job!!

[@sdbhattacharya]

How will it work if the value in Keyvault changes? How will it periodically refresh data from Keyvault?

[@CesarMartinez-el7ow]

Hello Houssem! Another great video: D. I have a question, I understand that the best way to secure secrets is one of these solutions like AKV, but is it totally normal that I can run a Cat command inside a pod and I can see the sensitive data? I am a little confused. Thanks!

[@sharatbhaskar527]

One question AAD pod managed Identity is in review mode. So we can't use it for production environment. Is there nay alternative if we don't want to create managed identity?

[@yerrasanthosh764]

Hi
I am trying to access my azure keyvault secrets with aks. My aks cluster is on one subscription and my key vault is into another sub. I have create service principle and added to keyvault and created secret to that in aks. But while creating the pod I am getting forbidden error can't run no root user.

[@sushantraje2000]

What If we wanted to changes secrets in key, how it will reflect the changes

[@thunderbirds8633]

How to use system managed identity for this setup?