How to Securely Manage Secrets in Containers

In this lab, we show how to safely distribute and use a JSON Web Token (JWT) which a client container uses to access a service. In the four challenges in this tutorial, you experiment with four different methods for managing secrets to learn not only how to manage secrets correctly in your containers but also about methods that are inadequate:

Challenge 1: Hard code secrets in your app
Challenge 2: Pass secrets as environment variables
Challenge 3: Use local secrets
Challenge 4: Use a secrets manager

Although this tutorial uses a JWT as a sample secret, the techniques apply to anything for containers that you need be kept secret, such as database credentials, SSL private keys, and other API keys.

Watch the second webinar Microservices Secrets Management 101