Protecting Your Crown Jewels with External Secrets Operator - Moritz Johner, Form3

Protecting Your Crown Jewels with External Secrets Operator - Moritz Johner, Form3

Secrets management is a difficult challenge: How do you create, rotate and manage access? And how would you even do that at scale? With External Secrets Operator you can leverage existing solutions like HashiCorp Vault or AWS Secrets Manager that manage secrets for you and integrate them with Kubernetes. Moritz and Lucas want to share their insights on how secrets management is done right in a highly regulated environment to hit the sweet spot between developer productivity and information security concerns. In this session, attendees will learn how to manage secrets in a GitOps way for self-sufficient teams to make developers, auditors and product managers happy, going over a few threat models, and showing what should be a target for concern, and should not. External Secrets Operator is a community endeavor that emerged from different open source projects that all tried to solve one problem: pull secrets from a secret management API into Kubernetes. We joined our efforts in 2020 to find a common denominator across projects to build the best solution to that problem and even go beyond that. Today, we've built a vendor-neutral community around the project and provide a consistent custom resource API across different cloud vendors and secret management APIs.