Evaluation of Methods for Managing Secrets for Kubernetes on Microsoft Azure

Management of IT secrets, such as passwords and application programming interface (API) keys, has become an area of increased importance as the number of systems that use such secrets has grown in each organization. To manage secrets in Kubernetes, no single solution has emerged as a de facto approach for organizations, as there are several aspects to consider for each including features, complexity, trustworthiness, security, and cost.

This report aims to assist organizations with evaluating solutions and approaches to secrets management, specifically for Kubernetes on Azure cloud. First, this report provides an overview of secrets management and its functions. Then, it reviews the features of several available options that can be used for Kubernetes on Azure cloud systems. Finally, it reviews considerations beyond functionality. Organizations can use the background and tradeoff information to guide their selection of a solution that fits their particular context.