karabanov/k8s-secrets-management

Secrets for apps deployed into K8S

This repo is set of examples and prototypes for secrets management

Requirements

• minikube

• kubectl

• helm

• docker

• jq

• curl

• make

  • linux:
    • Depends on distro
  • mac os:
    • brew install make
  • windows:
    • instruction
• sed

  • linux:
    • You are OK
  • mac os:
    • instruction
  • windows:
    • instruction

Documentation

• errors and how to fix them

• TODO

• Demo project schemes

  • dev-setup

    

  • dev-setup

    

  • prod-setup

    

Useful links

• Mutating webhook configuration examples
• Mutating webhook annotations
• Service account issuer validation from BanzaiCloud (k8s 1.21+)
• Service account issuer validation official documentation (k8s 1.21+)
• chart values
• sidecar injector
• csi provider
• vault agent
• vault injector examples

How to start

• Run make minikube-start

• (Optional) If you wish to download docker images before demo

  • Run make prepare
• (Optional) If you wish to see every container in test cluster

  • Run make pods-watch
• (Optional) If you wish to see cluster events

  • Run make events-watch

• Run make dashboard-deploy

• Run make proxy

• Run make admin-sa-token-get

• Open dashboard

---

• Next step: Deploy bank vault Vault Secrets Webhook