3663 - Secrets & Sidecars：使用 Vault 大规模自动化 Kubernetes Secrets.pdf

1、Orlando,FLOctober 69IBM TechXchange2025Workshop 3663 Secrets&SidecarsMichael KosirIBM,Sr.Developer AdvocateAutomating Kubernetes Automating Kubernetes Secrets at Scale with VaultSecrets at Scale with Vault2025 HASHICORPSr.Developer AdvocateHashiCorp,an IBM Companyhe/him/in/michael-kosirmichaelkosirM

2、ichaelKosir2025 HASHICORP4AgendaSecrets SprawlHashiCorp VaultKubernetes/OpenShiftHands On DemoConclusion2025 HASHICORPDevProductionCI5AAAAAAAAAGitHubDevOpsSecrets ManagementConfluencePassword ManagersPlatforms&Applications2025 HASHICORP6DevAAAProductionAAACIAAA2025 HASHICORPHashiCorp Vault72025 HASH

3、ICORPVault centrally manages and enforces access to secrets and systems based on trusted sources of application and user identity.HashiCorp VaultSecrets and encryption management systemIdentity-based securitySecurity system of record Lifecycle management of credentialsClientsAuthenticationSecretsPol

4、iciesVault2025 HASHICORPHashiCorp VaultSecrets and encryption management systemIdentity-based securitySecretsCertificatesKeysData ProtectionStaticRotatedDynamicDatabase PKIManaged KeysKMSKMIPHSMEncryptionSignaturesTokenization2025 HASHICORPSelf Managed|Always FreeCore capabilities to enable secrets

5、management,limit secret sprawl,and encryption of data in transit and at rest.10Self Managed|EnterpriseFor enterprises with enhanced security,compliance needs.Disaster recovery,secrets sync,advanced event management,tokenization,more.HashiCorp Managed|CloudHosted version of Vault Enterprise operated

6、by HashiCorp to allow organizations to get up and running quickly.HashiCorp VaultEditions and offerings2025 HASHICORP11HashiCorp VaultAvailability and resilienceSingle region Vault Enterprise cluster with maximum resiliency with integrated storage on virtual machines.Three availability zonesPerforma