Link to the full talk: https://youtu.be/aWddVU_UmDs https://go.dok.community/slack https://dok.community ABSTRACT OF THE TALK In Kubernetes, it can be difficult to keep application API keys, access tokens and passwords safe. There are several different approaches to solving this problem, and in this talk Kim will demonstrate how to install Hashicorp Vault and the Secrets Store CSI Driver so that your applications can access secrets stored in ephemeral volumes. BIO Kim is technologist and educator, and she currently works as a Developer Advocate at DigitalOcean. Kim lives in Denver, Colorado in the USA. KEY TAKE-AWAYS FROM THE TALK How the Kubernetes Secrets Store CSI Driver with Vault uses Kubernetes volumes

1. Getting Started with
the Kubernetes
Secrets Store CSI
Driver

2. Kim Schlesinger

3. Agenda
1. Key Terms
2. Demo
3. Q & A

4. Key Terms
Ephemeral Volumes
• Not PVs or PVCs
• Volumes have the same lifecycle as a pod
• Good for storing read-only data
• SIG-CSI
• GA in Kubernetes v1.19

5. CSI Ephemeral
Volumes
Generic Ephemeral
Volumes
Follows pod
lifecycle
✅ ✅
Inline definition ✅ ✅
Specify storage class ❌ ✅
3rd Party Driver ✅ ❌

6. Kubernetes Secrets Store CSI
Driver with HashiCorp Vault

7. Demo

8. Q & A

9. Resources
• Secrets Store CSI Driver Documentation
• Kubernetes CSI Developer Documentation
• HashiCorp Learn: Mount Vault Secrets through Container
Storage Interface (CSI) Volume
• Kubernetes Auth Method

10. Thank you!
@kimschles
digitalocean.com
digitalocean.com/community