DevConf.US 2021

Developers and sysadmins often need to use sensitive data, such as API tokens or login credentials to a database. When containerizing applications, this data needs to be passed into the container without the risk of exposure to somewhere outside the container, such as in an image registry. How can we securely expose and use such information in a container? Secrets is a new feature in Podman and Buildah that allows users to centrally manage sensitive information. In addition, it also allows users to easily and securely access confidential data inside a container or build. This talk will explore why secrets are needed, how they’re implemented within Podman and Buildah, as well as contain demos on secrets inside containers and builds. We will explore different use cases and options, discuss future improvements and ideas, and have time for questions, feedback, and suggestions. By the end of this talk, you may be a secrets enthusiast, eager to use secrets inside your own containers!