{"id":3421,"date":"2017-02-09T21:05:05","date_gmt":"2017-02-09T21:05:05","guid":{"rendered":"https:\/\/www.rsoftsolution.com\/blog\/docker-makes-secrets-management-a-built-in-feature-of-its-enterprise-product.html"},"modified":"2017-02-09T21:05:05","modified_gmt":"2017-02-09T21:05:05","slug":"docker-makes-secrets-management-a-built-in-feature-of-its-enterprise-product","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/docker-makes-secrets-management-a-built-in-feature-of-its-enterprise-product.html","title":{"rendered":"Docker makes secrets management a built-in feature of its enterprise product"},"content":{"rendered":"


\n<\/p>\n

A few years ago, using containers<\/a> to run your applications came with a number of security tradeoffs compared to using virtual machines. As enterprises started adopting various container technologies faster than anybody expected, that became an issue and companies like Docker started making\u00a0security a\u00a0priority. For Docker especially, that work is starting to pay off. The company today announced<\/a>\u00a0that it now offers a container-native secrets management solution<\/a>\u00a0for Docker Datacenter<\/a> that allows developers to safely make API keys, encryption keys and passwords available to their applications without having to use a third-party service.<\/p>\n

As Docker security director Nathan McCauley told me, the traditional way of sharing these secrets generally involved copying it to a host or maybe integrating it directly into the source code. \u201cContainers turned that upside down because the code could move arbitrarily \u2014 even to different infrastructure,\u201d said McCauley. So people would either hack together their own solutions or use a third-party service like HashiCorp\u2019s Vault<\/a>.<\/p>\n

\"937d1e2d-bf31-4875-a19c-3604d104dd89\"<\/a><\/p>\n

Taking a shot at Docker\u2019s container orchestration competitors, McCauley also\u00a0argued that solutions that a simply bolted-on to these tools are inherently insecure. It\u2019s worth noting, though, that Kubernetes also has built-in tools<\/a> for managing secrets as well.<\/p>\n

Docker\u2019s solution lets you easily add the secret to your cluster (or a \u201cswarm,\u201d in Docker\u2019s parlance). It\u2019s only shared over mutually authenticated TLS connections and then stored securely on a manager node where it\u2019s never written to disk unencrypted. You can find\u00a0a few examples of how all of this works in practice here<\/a>. The main idea here, though, is to ensure that all of this is very easy for developers to integrate and completely independent of the underlying infrastructure.<\/p>\n

As Docker\u2019s VP of Enterprise Marketing David Messina told me, the company now considers security one of its main selling points. He argues that\u00a0the company wants to get to a point where enterprises choose Docker because it\u2019s inherently more secure than other\u00a0options, including existing legacy solutions. \u201cIt\u2019s a thift. We always had these pillars of agility and portability, that\u2019s why everybody gravitated to us, but we\u2019re announcing that the third pillar is security,\u201d he added.<\/p>\n

\u00a0<\/p>\n

<\/p>\n

Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/JUTPzlhFDkY\/<\/p>","protected":false},"excerpt":{"rendered":"

A few years ago, using containers to run your applications came with a number of security tradeoffs compared to using virtual machines. As enterprises started adopting various container technologies faster <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-3421","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t