YOKOHEI.COM

YOKOHEI.COM

›Amazon EKS

Kubernetes Basics

  • Kubernetes Basics
  • Commands
  • Static Pod
  • Drain & Uncordon
  • Cluster Upgrade
  • Backup & Restore
  • Certification
  • RBAC
  • CNI
  • CoreDNS
  • Ingress

Kubernetes the Hard Way

  • the Hard Way?
  • AWS Prerequisites
  • CA and TLS
  • Configuration Files
  • Data Encryption
  • Bootstrapping etcd
  • Bootstrapping Control Plane
  • Bootstrapping Worker Node
  • kubectl configuraton
  • Pod Network
  • RBAC for Kubelet
  • Coredns Add-On
  • Test
  • TLS Bootstrapping

Amazon EKS

  • EKS Introduction
  • Ingress with ALB
  • PersistentVolume with EBS
  • NetworkPolicy with Calico
  • Secret with KMS
  • EKS Hands-On

Secret with KMS

参考資料

Using AWS KMS for application secrets in Kubernetes | Medium
https://medium.com/@mtreacher/using-aws-kms-for-application-secrets-in-kubernetes-149ffb6b4073

shyiko/kubesec | Github
https://github.com/shyiko/kubesec

kubesecを使ってkubernetesのsecret定義を暗号化する | Qiita
https://qiita.com/tmonoi/items/31cfa4313226b44232c0

ネイティブサポートしてないっぽい…?
マニフェストに kms のことを書けるわけでもなさそう。
kubesec との連携は良さそうなので、試す。

← NetworkPolicy with CalicoEKS Hands-On →
▼ Codes ▼
LeetCodeGitHub
▼ Profile ▼
LinkedInFlickr
▼ Logo made with DesignEvo ▼
DesignEvo
Copyright © 2020 Kohei Yoshida