Passwords and secrets in Kubernetes, ho to do it right Ondrej Sika

Passwords are the weakest link in modern security — they leak, get shared over email and Teams channels, get stored in .env files, and rotated (if at all) once a year. Yet Kubernetes offers tools that can eliminate passwords entirely — for people, applications, and services alike. In this talk, we'll look at how identity management works in Kubernetes from the ground up. Why service accounts with long-lived credentials are toxic debt, what the workload identity is, and what a real-world journey from "passwords everywhere" to a zero-trust architecture looks like. You'll walk away with concrete patterns and real-world example in Kubernetes with Hashicorp Vault — and most importantly, an understanding of why "no password" is more secure than "a strong password."

Видео Passwords and secrets in Kubernetes, ho to do it right Ondrej Sika канала KCDCzechSlovak