Главная
Study mode:
on
1
Intro
2
Extensibility at the RPC layer
3
Motivating Problem - Encrypting Secrets at Rest
4
Implement Transformer Interface
5
Step #2: Create your YAML config structure
6
Add your type to ProviderConfiguration
7
Prefix Transformer
8
Define your prefix
9
Add Init logic for your transformer
10
Re-using Envelope Transformer
11
KMS encryption configuration
12
add configurable DEK type to KMS plugin
13
teach KMS plugin about your new DEK type
14
choose your KMS provider and plugin
15
Summary
Description:
Explore the architecture and implementation of Storage Transformers in Kubernetes through this demo-heavy conference talk. Learn how to extend Kubernetes by leveraging storage transformers, which are invoked by the kube-apiserver before resources are written to or read from etcd. Discover appropriate scenarios for using storage transformers as an extensibility point, including encrypting secrets at rest. Follow along as the speaker demonstrates the step-by-step process of implementing a transformer interface, creating YAML config structures, and configuring KMS encryption. Gain insights into re-using envelope transformers, adding configurable DEK types to KMS plugins, and choosing the right KMS provider for your needs.

Extending Kubernetes with Storage Transformers

Linux Foundation
Add to list
0:00 / 0:00