external-secrets: Zero Trust Secrets Management with ESO
Lightningat KubeCon + CloudNativeCon Europe 2025 · on Tuesday, 2025-04-01· at 10:41· Platinum Suite | Level 3·
summary
Operator runs inside the cluster, reaches out to external vaults and creates Kubernetes Secret objects, using uses Kubernetes service accounts (JWTs) instead of static credentials; it currently supports ~30 providers. Reconciliation runs on a schedule (examples: once an hour, every 10m, every minute), and built features include periodic reconciliation and secret rotation and cross-cluster distribution with templating, multi-tenancy, namespace scoping. Demo fetches a DB user and base64 password successfully from an external secret store.
AI-written summary · about
related talks
37mExternal Secrets Operator
41mOptimizing Secrets Management
26mSecret Management in Kubernetes: The GitOps Way - Benjamin Ritter
01h 02mSecret Management: The Soft Way
43mA Confidential Story of Well-Kept Secrets
25mGitOps and Secrets: State of the Union
24mCan You Keep a Secret? On Secret Management in Kubernetes
46mSecuring Secrets in the GitOps era