External Secrets Operator
summary
Open source External Secrets Operator synchronizes Azure Key Vault and other secret stores into Kubernetes by mapping SecretStore/ClusterSecretStore credentials to ExternalSecret/ClusterExternalSecret resources and creating native k8s Secrets; it also supports the reverse via push secret and ClusterExternalSecret patterns. Amadeus adds a sync-time metric that measures delay from ClusterExternalSecret creation to k8s Secret readiness, implements tag-value retrieval for Vault entries, has unit coverage for Azure provider, and deploys the operator via Argo CD + Terraform across dozens of clusters in seconds.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:14External Secrets Operator overview
- 10:42Detailed look at custom resources
- 16:55Advanced features & templates
- 20:29Amaros' contributions
- 23:42Multi-cluster deployment
- 26:12Q&A 1
- 30:09Q&A 2
- 32:40Q&A 3
related talks
05mexternal-secrets: Zero Trust Secrets Management with ESO
25mGitOps and Secrets: State of the Union
41mOptimizing Secrets Management
26mSecret Management in Kubernetes: The GitOps Way - Benjamin Ritter
43mA Confidential Story of Well-Kept Secrets
30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay Dharap
41mEasy Secrets in Kubernetes: Because I Vault It Well
01h 02mSecret Management: The Soft Way