Hands-On Kubernetes on Windows

Kubernetes secrets on Windows machines

In Chapter 4, Kubernetes Concepts and Windows Support, we mentioned that one of Windows's node support limitations is that Kubernetes secrets that are mounted to pods as volumes are written in clear-text on node disk storage (not RAM memory). The reason for this is that Windows currently does not support mounting in-memory filesystems to pod containers. This may pose security risks, and needs additional actions to secure the cluster. At the same time, mounting secrets as environment variables has its own security risks—you can enumerate environment variables for processes if you have access to the system. Until it is possible to mount secrets as volumes from in-memory filesystems, there is no completely ...