Kubernetes 㧠Pod ãŒä½¿ç”¨ã§ãã‚‹ Secret を制é™ã™ã‚‹æ–¹æ³• - QiitaPod ãŒä½¿ç”¨ã§ãã‚‹ Secret を制é™ã™ã‚‹æ–¹æ³• Kubrenetes ã§ã¯ã€ServiceAccount リソース㫠kubernetes.io/enforce-mountable-secrets アノテーションを true ã§è¨å®šã™ã‚‹ã“ã¨ã§ã€ãã® ServiceAccount ã§å®Ÿè¡Œã™ã‚‹ Pod ㌠secrets フィールドã§æŒ‡å®šã•ã‚ŒãŸåŒä¸€ Namespace ã® Secret ã—ã‹ä½¿ç”¨ã§ããªã„ (マウントã§ããªã„) よã†ã«åˆ¶é™ã™ã‚‹æ©Ÿèƒ½ 1 ãŒæä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚ apiVersion: v1 kind: ServiceAccount metadata: name: test-sa annotations: kubernetes.io/enforce-mountable-secrets: "true" secrets: - name: mountable-secret-1 - nam
ArgoCD Image Updater with Digital Ocean Container Registry
GitHub - gitleaks/gitleaks: Protect and discover secrets using Gitleaks 🔑
Vault Secrets Operator 㨠HCP Vault 㧠Kubernetes ã®ã‚·ãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã‚’管ç†ã—よㆠ- APC 技術ブãƒã‚°
Vault Secrets Operator: A new method for Kubernetes integration
AWSã§ã‚¢ã‚¯ã‚»ã‚¹ã‚ーãŒæ¼æ´©ã—ãŸæ™‚ã«æ¤œçŸ¥ãƒ»å‰Šé™¤ã™ã‚‹ä»•çµ„ã¿ã‚’実装ã™ã‚‹ - Qiita
より安全ãªKubernetes Secrets管ç†ã®ãŸã‚ã®ã‚¨ã‚³ã‚·ã‚¹ãƒ†ãƒ ã®é–‹ç™º
git-secretsを使用ã—ã¦AWSアクセスã‚ーã®ã‚³ãƒŸãƒƒãƒˆã‚’防ã方法ã®ç´¹ä»‹ | DevelopersIO
{{#tags}}- {{label}}
{{/tags}}