Security with Certificates in Kubernetes
Talkat CloudOpen @ Open Source Summit Europe 2022 · on Thursday, 2022-09-15· at 11:55· Wicklow Hall 2A (Level 2), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Step-by-step demonstration of creating a CA with cfssl, OpenSSL, easy-rsa, generating a key and CSR, submitting it to the certificates.k8s.io API, and using kubectl certificate approve to have the CA sign the CSR; the signed cert is stored as a Kubernetes Secret and mounted into a pod. Shows signing a CSR with a custom CA, viewing the issued cert, explains kubeadm auto-generation and kubelet’s --rotate-certificates behavior and that default cert lifetime is one year.
AI-written summary · about
chapters (4)
- 0:00Start
- 3:59Workflow Diagram for certificate signing
- 4:47Certificates generation
- 15:41Certificate Bootstrapping and Rotation
related talks
22mIdentity with certificates in Kubernetes
15mCertificates in Kubernetes
36mCertifik8s: All You Need to Know About Certificates in Kubernetes
15mSecuring your app's communications with Kubernetes, Azure Key Vault, and TLS certificates
32mAchieving Mutual TLS: Secure Pod-to-Pod Communication Without the Hassle
33mBeyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions
38mImproving Secure Pod-to-Pod Communication Within Kubernetes Using...
45mBeyond cluster-admin: Getting Started with Kubernetes Users and Permissions