Secrets Store CSI Driver-Bring Your Own Enterprise Secrets Store to K8s

on YouTube ↗36m

" summary

Secrets Store CSI Driver mounts secrets, keys and certs from external stores into pods via a CSI volume, authenticates to HashiCorp Vault using Kubernetes service account tokens and to Azure Key Vault (demo uses aad-pod-identity), runs as a daemonset on nodes, and supports inline volumes on k8s 1.15+ or PV/PVC on 1.13+. Providers are alpha (Vault provider currently reads KV pairs only), key rotation is not automatic, Helm charts exist, and the live demos successfully retrieved and mounted secrets.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 4:40Pod using Secrets Store CSI driver
3. 8:34Prerequisites for Secrets Store CSI Driver
4. 12:45Provider interface
5. 28:20Project Status
6. 29:26Resources

" related talks

• 24mSecrets Store CSI Driver: Keeping Secrets SecretAnish Ramasekar, Tommy Murphy · KubeCon + CloudNativeCon Europe 2021
• 24mCan You Keep a Secret? On Secret Management in KubernetesLiav Yona, Gal Cohen · KCD Ukraine 2023
• 30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay DharapVijay Dharap · ContainerDays 2023
• 39mManaging and securing Kubernetes secrets - Simon PearceSimon Pearce · ContainerDays 2023
• 15mSecuring your app's communications with Kubernetes, Azure Key Vault, and TLS certificatesEugene Romero · NDC Oslo 2023
• 20mEvolving Kubernetes security with Vault and OpenShiftPaul Stamp, Nick Png · HashiConf 2025
• 50mSecuring Secrets in Kubernetes with Secret Provider and Azure Key VaultJosé Manuel Ordoñez · KCD Guatemala 2023
• 30mHow to Make Kubernetes Secrets Really… Secret?J. Hourcade · Kubernetes Community Days France 2023