DevOps Tutorial : Docker Secrets

Hello Friends ,

Welcome to DevOps Tutorial , In this video lecture we will learn docker secrets.

Docker Secrets
Secrets : A secret is a piece of data, such as a password, SSH private key, SSL certificate, or another piece of data that should not be transmitted over a network or stored unencrypted in a Dockerfile or in your application’s source code.

In Docker 1.13 and higher, you can use Docker secrets to centrally manage this data and securely transmit it to only those containers that need access to it.

Docker Secrets is only available in the Swarm mode, so standalone containers can not use this feature.

A given secret is only accessible to those services which have been granted explicit access to it, and only while those service tasks are running.

How Docker Swarm manage the secrets.
When a user adds a new secret to a Swarm cluster, this secret is sent to a manager using a TLS connection.

TLS is a cryptographic protocol that provides communications security over a network by providing communication encryption, privacy and data integrity.

When we have multiple Managers, RAFT manage the secrets on all the managers.

Containers work on mounted decrypted secrets, which store at /run/secrets/secret_name in containers.

User can update a service to grant it access to additional secrets or revoke its access to a given secret at any time.

When container task stops running, the decrypted secrets shared to it are unmounted from the in-memory filesystem for that container and flushed from the node’s memory.

Reference :

YOUTUBE PLAYLIST

#DockerSwarm #WhatIsDockerSwarm #DockerTutorials #DockerTraining #DevOpsTools #DevOpsTraining #DockerCommands #DockerForBeginners #DockerFreeTutorials #DockerforDevOps
#quarantine2020 #quarantinelearning

#DockerImages #DockerContainers #DockerTutorials #DevOpsTools #DevOpsTraining #DockerFreeTutorials #DockerforDevOps#Docker2020 #DockerTutorial2020
#DockerVolume #DockerBindMount

[TheWeekendFreak]

Awesome sir 👍, Thankyou for this tutorial.

[mrVAK]

Can we use docker secrets for backend/frontend apps?

[ricardohincapie]

Thank you. I don't get how this is secret if by log into the container you just cat the secret and it is plain text. I thought it was like a vault

[balak]

Nice content, is possible to use this concept(docker secrets)in ECS (AWS)

[freeforever]

How did u save the password once typed

[venkataramanareddy]

Thank very much, this helps a lot.. but still the password file is readable right. can't we restrict from reading the /run/secrets/pass file by others.

[springbootcourse]

Rare quality. Thanks for this very informative video :-) Hope you do more stuff :-)