Trousseau - the Kubernetes Key Management Service provider
summary
Describes Trousseau, a KMS provider implementation for Kubernetes that uses the Kubernetes KMS provider plugin framework to perform envelope encryption of Secret objects so they are encrypted before being stored in etcd. Explains how Trousseau lets teams continue to use the native Kubernetes API and kubectl while integrating with an existing Key Management Service, avoiding separate tooling or workflows required by other commercial or open-source secret-management solutions.
AI-written summary · about
related talks
16mA Kubernetes Zero Trust Security Model Using a KMS Provider Plugin
35mTurtles All the Way Down: Managing Kubernetes Secrets
29mExtending Kubernetes with Storage Transformers
29mExtending Kubernetes with Storage Transformers
29mBase64 is not encryption...
36mSecuring Kubernetes with Trusted Platform Module (TPM)
54mBase64 is not encryption – a better story for Kubernetes Secrets
38mHardware-based KMS Plug-in to Protect Secrets in Kubernetes