WEBVTT

1
00:00:02.600 --> 00:00:05.500
<00:00:02.600>We <00:00:02.833>can <00:00:03.066>start <00:00:03.300>because <00:00:03.533>in <00:00:03.766>this <00:00:04.000>session

2
00:00:05.500 --> 00:00:08.000
<00:00:05.500>we're <00:00:05.700>going <00:00:05.900>to <00:00:06.100>talk <00:00:06.300>about <00:00:06.500>or <00:00:06.700>a <00:00:06.900>bit

3
00:00:08.200 --> 00:00:11.600
<00:00:08.200>or <00:00:08.355>Internet <00:00:08.511>an <00:00:08.666>introduction <00:00:08.822>if <00:00:08.977>you <00:00:09.133>will <00:00:09.288>up <00:00:09.444>security <00:00:09.600>secrets

4
00:00:11.600 --> 00:00:14.200
<00:00:11.600>in <00:00:11.740>the <00:00:11.879>githubs <00:00:12.020>here <00:00:12.160>because <00:00:12.299>at <00:00:12.440>the <00:00:12.580>end <00:00:12.719>we <00:00:12.860>are <00:00:13.000>using

5
00:00:14.200 --> 00:00:16.100
<00:00:14.200>devops. <00:00:14.899>No <00:00:15.600>because

6
00:00:18.100 --> 00:00:22.200
<00:00:18.100>The <00:00:18.275>end <00:00:18.450>we <00:00:18.625>want <00:00:18.800>to <00:00:18.975>just <00:00:19.150>release <00:00:19.325>often <00:00:19.500>to

7
00:00:21.200 --> 00:00:24.100
<00:00:21.200>production <00:00:21.666>and <00:00:22.133>maybe <00:00:22.599>you're

8
00:00:24.100 --> 00:00:27.900
<00:00:24.100>using <00:00:24.227>gidups. <00:00:24.354>I <00:00:24.481>know <00:00:24.609>that <00:00:24.736>after <00:00:24.863>me. <00:00:24.990>There <00:00:25.118>is <00:00:25.245>a <00:00:25.372>session <00:00:25.500>about

9
00:00:27.900 --> 00:00:30.700
<00:00:27.900>plus <00:00:28.133>which <00:00:28.366>is <00:00:28.599>a <00:00:28.833>GitHub <00:00:29.066>store. <00:00:29.299>So

10
00:00:30.700 --> 00:00:33.400
<00:00:30.700>it's <00:00:30.840>like <00:00:30.980>okay. <00:00:31.119>Yeah, <00:00:31.259>I'll <00:00:31.400>this <00:00:31.540>techniques <00:00:31.680>are <00:00:31.820>super <00:00:31.960>cool. <00:00:32.100>But

11
00:00:33.400 --> 00:00:36.900
<00:00:33.400>how <00:00:33.600>about <00:00:33.800>the <00:00:34.000>secrets <00:00:34.199>and <00:00:34.400>more <00:00:34.600>specifically, <00:00:34.800>how

12
00:00:36.900 --> 00:00:38.300
<00:00:36.900>about <00:00:37.152>the <00:00:37.404>secret <00:00:37.656>when <00:00:37.907>they <00:00:38.160>are

13
00:00:39.400 --> 00:00:42.500
<00:00:39.400>First <00:00:39.633>thing <00:00:39.866>it <00:00:40.100>and <00:00:40.333>then <00:00:40.566>they <00:00:40.800>are

14
00:00:42.500 --> 00:00:45.500
<00:00:42.500>inside <00:00:42.733>kubernetes <00:00:42.966>what's <00:00:43.200>happened <00:00:43.433>with <00:00:43.666>them? <00:00:43.900>So

15
00:00:45.500 --> 00:00:48.500
<00:00:45.500>this <00:00:45.627>is <00:00:45.754>a <00:00:45.881>bit <00:00:46.009>of <00:00:46.136>what <00:00:46.263>we're <00:00:46.390>going <00:00:46.518>to <00:00:46.645>try <00:00:46.772>to <00:00:46.900>answer

16
00:00:48.500 --> 00:00:51.100
<00:00:48.500>and <00:00:48.675>into <00:00:48.850>the <00:00:49.025>in <00:00:49.200>today's <00:00:49.375>session. <00:00:49.550>My <00:00:49.725>name <00:00:49.900>is

17
00:00:51.100 --> 00:00:52.100
<00:00:51.100>Alexander. <00:00:51.400>My <00:00:51.700>Twitter <00:00:52.000>is

18
00:00:52.800 --> 00:00:55.300
<00:00:52.800>Alex <00:00:52.974>Soto <00:00:53.150>B. <00:00:53.324>My <00:00:53.500>email <00:00:53.675>is <00:00:53.849>a <00:00:54.025>setup <00:00:54.199>where

19
00:00:55.300 --> 00:00:58.600
<00:00:55.300>address <00:00:55.455>that <00:00:55.611>come <00:00:55.766>if <00:00:55.922>you've <00:00:56.077>got <00:00:56.233>any <00:00:56.388>question. <00:00:56.544>Yeah, <00:00:56.699>I

20
00:00:58.600 --> 00:00:59.200
<00:00:58.600>know <00:00:58.735>that <00:00:58.870>you <00:00:59.005>can <00:00:59.140>just

21
00:01:01.100 --> 00:01:04.400
<00:01:01.100>ask <00:01:01.255>it <00:01:01.411>now <00:01:01.566>about <00:01:01.722>your <00:01:01.877>question <00:01:02.033>comes <00:01:02.188>later. <00:01:02.344>Feel <00:01:02.500>free

22
00:01:04.400 --> 00:01:07.600
<00:01:04.400>to <00:01:04.600>pick <00:01:04.800>me <00:01:05.000>in <00:01:05.200>Twitter <00:01:05.400>or <00:01:05.600>email <00:01:05.800>and

23
00:01:07.600 --> 00:01:10.300
<00:01:07.600>also <00:01:07.833>the <00:01:08.066>craft <00:01:08.300>of <00:01:08.533>all <00:01:08.766>these <00:01:09.000>books

24
00:01:10.300 --> 00:01:11.000
<00:01:10.300>going <00:01:10.930>to

25
00:01:11.800 --> 00:01:15.300
<00:01:11.800>See <00:01:11.975>some <00:01:12.149>of <00:01:12.325>them <00:01:12.500>at <00:01:12.675>the <00:01:12.850>end <00:01:13.024>because <00:01:13.200>there

26
00:01:14.300 --> 00:01:17.400
<00:01:14.300>is <00:01:14.475>the <00:01:14.649>kitups <00:01:14.825>cookbook <00:01:15.000>that <00:01:15.175>you <00:01:15.350>can <00:01:15.524>download <00:01:15.700>it

27
00:01:17.400 --> 00:01:21.100
<00:01:17.400>for <00:01:17.600>free. <00:01:17.800>So <00:01:18.000>first <00:01:18.200>of <00:01:18.400>all, <00:01:18.600>let's <00:01:18.800>define.

28
00:01:20.100 --> 00:01:23.600
<00:01:20.100>What <00:01:20.333>is <00:01:20.566>a <00:01:20.800>secret <00:01:21.033>because <00:01:21.266>again <00:01:21.500>a

29
00:01:23.600 --> 00:01:26.400
<00:01:23.600>secret <00:01:23.727>is <00:01:23.854>a <00:01:23.981>piece <00:01:24.109>of <00:01:24.236>information <00:01:24.363>that <00:01:24.490>is <00:01:24.618>only <00:01:24.745>known <00:01:24.872>by <00:01:25.000>one

30
00:01:26.400 --> 00:01:29.200
<00:01:26.400>person <00:01:26.555>or <00:01:26.711>few <00:01:26.866>people. <00:01:27.022>I <00:01:27.177>should <00:01:27.333>not <00:01:27.488>be <00:01:27.644>told <00:01:27.800>to

31
00:01:29.200 --> 00:01:34.100
<00:01:29.200>others. <00:01:29.307>This <00:01:29.415>comes <00:01:29.523>from <00:01:29.630>the <00:01:29.738>Cambridge <00:01:29.846>Dictionary <00:01:29.953>so <00:01:30.061>we <00:01:30.169>can <00:01:30.276>see <00:01:30.384>that <00:01:30.492>okay <00:01:30.600>secrets

32
00:01:32.100 --> 00:01:34.300
are

33
00:01:35.500 --> 00:01:39.100
<00:01:35.500>things <00:01:35.700>that <00:01:35.900>are <00:01:36.100>important <00:01:36.300>to <00:01:36.500>keep <00:01:36.700>secure <00:01:36.900>to

34
00:01:38.100 --> 00:01:41.500
<00:01:38.100>keep <00:01:38.449>secret <00:01:38.800>and <00:01:39.149>as <00:01:39.500>the

35
00:01:41.500 --> 00:01:44.500
<00:01:41.500>name <00:01:41.675>says <00:01:41.850>and <00:01:42.025>trying <00:01:42.200>to <00:01:42.375>not <00:01:42.550>talk <00:01:42.725>to <00:01:42.900>a

36
00:01:44.500 --> 00:01:47.500
<00:01:44.500>lot <00:01:44.655>of <00:01:44.811>people <00:01:44.966>because <00:01:45.122>you <00:01:45.277>know, <00:01:45.433>we <00:01:45.588>told <00:01:45.744>the <00:01:45.900>secret

37
00:01:47.500 --> 00:01:50.300
<00:01:47.500>then <00:01:47.733>this <00:01:47.966>other <00:01:48.200>people <00:01:48.433>can <00:01:48.666>talk <00:01:48.900>to

38
00:01:50.300 --> 00:01:54.100
<00:01:50.300>others <00:01:50.440>and <00:01:50.580>so <00:01:50.720>on <00:01:50.860>so <00:01:51.000>secret <00:01:51.140>is <00:01:51.280>something <00:01:51.420>important <00:01:51.560>and <00:01:51.700>I

39
00:01:53.100 --> 00:01:55.300
<00:01:53.100>really <00:01:53.800>like <00:01:54.500>music.

40
00:01:56.200 --> 00:01:59.200
<00:01:56.200>And <00:01:56.316>I <00:01:56.433>like <00:01:56.550>to <00:01:56.666>do <00:01:56.783>this <00:01:56.900>analogy <00:01:57.016>with <00:01:57.133>the <00:01:57.250>secrets. <00:01:57.366>There <00:01:57.483>are <00:01:57.600>some

41
00:02:00.800 --> 00:02:03.700
<00:02:00.800>sums <00:02:00.975>that <00:02:01.149>has <00:02:01.325>what <00:02:01.500>it's <00:02:01.675>known <00:02:01.850>as <00:02:02.024>back <00:02:02.200>mask

42
00:02:03.700 --> 00:02:07.300
<00:02:03.700>message. <00:02:03.855>You <00:02:04.011>can <00:02:04.166>see <00:02:04.322>that <00:02:04.477>it's <00:02:04.633>like <00:02:04.788>a <00:02:04.944>secret <00:02:05.100>because

43
00:02:06.300 --> 00:02:09.300
<00:02:06.300>it's <00:02:06.533>you <00:02:06.766>know, <00:02:07.000>you <00:02:07.233>listen <00:02:07.466>the <00:02:07.700>song

44
00:02:09.300 --> 00:02:12.300
<00:02:09.300>and <00:02:09.440>at <00:02:09.580>some <00:02:09.720>point <00:02:09.860>you <00:02:10.000>don't <00:02:10.140>understand <00:02:10.280>exactly <00:02:10.420>what <00:02:10.560>they <00:02:10.700>are

45
00:02:12.300 --> 00:02:13.400
<00:02:12.300>saying, <00:02:12.795>but <00:02:13.290>if

46
00:02:14.800 --> 00:02:17.200
<00:02:14.800>You <00:02:15.080>back <00:02:15.360>Play <00:02:15.640>the <00:02:15.920>song <00:02:16.200>then.

47
00:02:17.600 --> 00:02:20.500
<00:02:17.600>Understand. <00:02:18.066>Okay, <00:02:18.533>so <00:02:19.000>they

48
00:02:20.500 --> 00:02:23.600
<00:02:20.500>have <00:02:20.700>a <00:02:20.900>secret <00:02:21.100>inside <00:02:21.300>the <00:02:21.500>Sun <00:02:21.700>for <00:02:21.900>example

49
00:02:23.600 --> 00:02:24.600
<00:02:23.600>The <00:02:23.900>Beatles <00:02:24.200>with <00:02:24.500>rain.

50
00:02:25.700 --> 00:02:28.600
<00:02:25.700>Loser <00:02:25.933>in <00:02:26.166>the <00:02:26.399>back <00:02:26.633>Perfect <00:02:26.866>Sense <00:02:27.100>part

51
00:02:28.600 --> 00:02:31.700
<00:02:28.600>one <00:02:28.755>in <00:02:28.911>Russia <00:02:29.066>Waters <00:02:29.222>or <00:02:29.377>empty <00:02:29.533>space <00:02:29.688>is <00:02:29.844>the <00:02:30.000>Pink

52
00:02:31.700 --> 00:02:34.500
<00:02:31.700>Floyd <00:02:31.899>The <00:02:32.100>Wall <00:02:32.299>album. <00:02:32.500>So <00:02:32.700>okay, <00:02:32.899>there <00:02:33.100>are

53
00:02:34.500 --> 00:02:37.400
<00:02:34.500>some <00:02:34.733>Secrets <00:02:34.966>but <00:02:35.200>you <00:02:35.433>hear <00:02:35.666>something <00:02:35.900>that

54
00:02:37.400 --> 00:02:39.600
<00:02:37.400>it's <00:02:37.633>strange <00:02:37.866>and <00:02:38.100>then <00:02:38.333>you <00:02:38.566>say <00:02:38.800>oh

55
00:02:40.500 --> 00:02:43.600
<00:02:40.500>here <00:02:40.640>it <00:02:40.780>is <00:02:40.920>something <00:02:41.060>and <00:02:41.200>maybe <00:02:41.340>it's <00:02:41.480>a <00:02:41.620>secret. <00:02:41.760>But <00:02:41.900>also

56
00:02:43.600 --> 00:02:46.200
<00:02:43.600>there <00:02:43.880>are <00:02:44.160>other <00:02:44.440>songs <00:02:44.720>that <00:02:45.000>they

57
00:02:46.200 --> 00:02:47.900
<00:02:46.200>have <00:02:46.666>some <00:02:47.133>Secrets <00:02:47.600>inside.

58
00:02:48.600 --> 00:02:48.900
and

59
00:02:49.600 --> 00:02:50.100
<00:02:49.600>one <00:02:49.825>of <00:02:50.049>the

60
00:02:53.600 --> 00:02:56.500
<00:02:53.600>key <00:02:53.727>points <00:02:53.854>of <00:02:53.981>these <00:02:54.109>three <00:02:54.236>songs <00:02:54.363>that <00:02:54.490>you <00:02:54.618>can <00:02:54.745>see <00:02:54.872>here <00:02:55.000>is

61
00:02:56.500 --> 00:02:59.500
<00:02:56.500>that <00:02:56.733>all <00:02:56.966>of <00:02:57.200>them <00:02:57.433>are <00:02:57.666>writing <00:02:57.900>in

62
00:02:59.500 --> 00:03:02.300
<00:02:59.500>V <00:02:59.780>minor <00:03:00.060>key <00:03:00.340>women <00:03:00.620>or <00:03:00.900>key.

63
00:03:02.300 --> 00:03:06.000
<00:03:02.300>It's <00:03:02.533>you <00:03:02.766>know, <00:03:03.000>it's <00:03:03.233>a <00:03:03.466>in <00:03:03.700>the

64
00:03:05.200 --> 00:03:08.500
<00:03:05.200>king <00:03:05.375>the <00:03:05.549>songs <00:03:05.725>that <00:03:05.899>I <00:03:06.075>use <00:03:06.250>when <00:03:06.424>there <00:03:06.600>is

65
00:03:08.500 --> 00:03:09.000
<00:03:08.500>the <00:03:08.950>death.

66
00:03:09.900 --> 00:03:12.800
<00:03:09.900>Near <00:03:10.600>when <00:03:11.300>your

67
00:03:12.800 --> 00:03:15.800
<00:03:12.800>life <00:03:13.000>is <00:03:13.200>in <00:03:13.400>a <00:03:13.600>trouble <00:03:13.800>right <00:03:14.000>in <00:03:14.200>this

68
00:03:15.800 --> 00:03:18.600
<00:03:15.800>cases. <00:03:16.033>The <00:03:16.266>music <00:03:16.500>usually <00:03:16.733>is <00:03:16.966>right <00:03:17.200>in

69
00:03:18.600 --> 00:03:21.300
<00:03:18.600>Vivian <00:03:18.755>or <00:03:18.911>key. <00:03:19.066>We <00:03:19.222>saw <00:03:19.377>this <00:03:19.533>for <00:03:19.688>example <00:03:19.844>in <00:03:20.000>the

70
00:03:21.300 --> 00:03:24.300
<00:03:21.300>right <00:03:21.427>of <00:03:21.554>the <00:03:21.681>Valkyries, <00:03:21.809>right? <00:03:21.936>All <00:03:22.063>the <00:03:22.190>volcanoes <00:03:22.318>are <00:03:22.445>going <00:03:22.572>there <00:03:22.700>to

71
00:03:24.300 --> 00:03:25.000
<00:03:24.300>just <00:03:24.615>you <00:03:24.930>know.

72
00:03:26.300 --> 00:03:29.400
<00:03:26.300>Take <00:03:26.650>the <00:03:27.000>death <00:03:27.350>Heroes <00:03:27.700>and

73
00:03:29.400 --> 00:03:33.300
<00:03:29.400>put <00:03:29.540>it <00:03:29.680>to <00:03:29.820>Valhalla. <00:03:29.960>So <00:03:30.100>there <00:03:30.240>is <00:03:30.380>that <00:03:30.520>so <00:03:30.660>Wagner <00:03:30.800>decided

74
00:03:32.300 --> 00:03:35.400
<00:03:32.300>to <00:03:32.766>write <00:03:33.233>in <00:03:33.700>viminar

75
00:03:35.400 --> 00:03:38.200
<00:03:35.400>but <00:03:35.555>there <00:03:35.711>are <00:03:35.866>more <00:03:36.022>for <00:03:36.177>example, <00:03:36.333>you <00:03:36.488>know <00:03:36.644>Symphony <00:03:36.800>Number

76
00:03:38.200 --> 00:03:41.600
<00:03:38.200>Eight. <00:03:38.480>It's <00:03:38.760>used <00:03:39.040>by <00:03:39.320>The <00:03:39.600>Smurfs

77
00:03:41.600 --> 00:03:45.900
<00:03:41.600>animation. <00:03:43.000>Sorry

78
00:03:44.900 --> 00:03:47.600
<00:03:44.900>went <00:03:45.600>girgamel <00:03:46.300>is

79
00:03:47.600 --> 00:03:50.600
<00:03:47.600>trying <00:03:47.950>to <00:03:48.299>kill <00:03:48.650>the <00:03:49.000>Smurfs.

80
00:03:50.600 --> 00:03:53.400
<00:03:50.600>So <00:03:50.950>the <00:03:51.299>authors <00:03:51.650>of <00:03:52.000>a

81
00:03:53.400 --> 00:03:56.500
<00:03:53.400>Smurfs <00:03:53.555>decided <00:03:53.711>to <00:03:53.866>put <00:03:54.022>a <00:03:54.177>song <00:03:54.333>in <00:03:54.488>demeanor <00:03:54.644>and <00:03:54.800>the

82
00:03:56.500 --> 00:03:59.400
<00:03:56.500>same <00:03:56.780>happened <00:03:57.060>with <00:03:57.340>In <00:03:57.620>the <00:03:57.900>Hall

83
00:03:59.400 --> 00:04:02.100
<00:03:59.400>of <00:03:59.575>the <00:03:59.750>Mountain <00:03:59.925>King <00:04:00.100>where <00:04:00.275>Pershing <00:04:00.450>is <00:04:00.625>trying <00:04:00.800>to

84
00:04:02.100 --> 00:04:05.600
<00:04:02.100>be <00:04:02.275>captured <00:04:02.450>by <00:04:02.625>the <00:04:02.799>trolls <00:04:02.975>of <00:04:03.150>the <00:04:03.325>moment <00:04:03.500>and

85
00:04:05.600 --> 00:04:09.100
<00:04:05.600>why <00:04:05.833>he <00:04:06.066>explained <00:04:06.299>these <00:04:06.533>right <00:04:06.766>because <00:04:07.000>there

86
00:04:08.100 --> 00:04:11.800
<00:04:08.100>is <00:04:08.299>not <00:04:08.500>a <00:04:08.700>secret <00:04:08.900>here, <00:04:09.100>but <00:04:09.299>it <00:04:09.500>is

87
00:04:11.800 --> 00:04:12.600
<00:04:11.800>a <00:04:12.160>secret <00:04:12.519>here.

88
00:04:13.600 --> 00:04:17.900
<00:04:13.600>Why <00:04:13.880>well, <00:04:14.160>because <00:04:14.440>the <00:04:14.720>40 <00:04:15.000>14th

89
00:04:16.900 --> 00:04:20.000
<00:04:16.899>of <00:04:17.250>October <00:04:17.599>of <00:04:17.950>1991 <00:04:18.299>Queen

90
00:04:19.200 --> 00:04:22.400
<00:04:19.200>released <00:04:19.550>The <00:04:19.899>Show <00:04:20.250>Must <00:04:20.599>Go

91
00:04:22.400 --> 00:04:22.700
On

92
00:04:23.900 --> 00:04:24.300
some

93
00:04:25.800 --> 00:04:29.000
<00:04:25.800>Just <00:04:26.033>almost <00:04:26.266>one <00:04:26.500>month <00:04:26.733>later. <00:04:26.966>Freddie <00:04:27.200>Mercury

94
00:04:28.000 --> 00:04:29.300
died.

95
00:04:30.200 --> 00:04:30.600
then

96
00:04:31.800 --> 00:04:34.400
<00:04:31.800>you <00:04:31.975>know <00:04:32.150>that <00:04:32.325>most <00:04:32.500>of <00:04:32.675>the <00:04:32.850>people <00:04:33.025>didn't <00:04:33.200>know

97
00:04:34.400 --> 00:04:36.300
<00:04:34.400>that <00:04:34.750>Freddie <00:04:35.099>Mercury <00:04:35.450>was <00:04:35.799>dying.

98
00:04:37.400 --> 00:04:40.800
<00:04:37.400>But <00:04:37.599>one <00:04:37.799>of <00:04:38.000>the <00:04:38.200>last <00:04:38.400>songs <00:04:38.599>they <00:04:38.799>wrote

99
00:04:40.800 --> 00:04:44.000
<00:04:40.800>it <00:04:41.150>was <00:04:41.500>in <00:04:41.850>V <00:04:42.200>minor

100
00:04:43.200 --> 00:04:46.700
<00:04:43.200>key. <00:04:43.400>So <00:04:43.599>there <00:04:43.800>was <00:04:44.000>a <00:04:44.200>secret <00:04:44.400>in <00:04:44.599>this

101
00:04:46.700 --> 00:04:49.300
<00:04:46.700>song <00:04:46.855>not <00:04:47.011>just <00:04:47.166>because <00:04:47.322>of <00:04:47.477>the <00:04:47.633>title <00:04:47.788>of <00:04:47.944>The <00:04:48.099>Show

102
00:04:49.300 --> 00:04:52.300
<00:04:49.300>Must <00:04:49.533>Go <00:04:49.766>On <00:04:50.000>also <00:04:50.233>the <00:04:50.466>key <00:04:50.700>of

103
00:04:52.300 --> 00:04:55.400
<00:04:52.300>the <00:04:52.500>song <00:04:52.700>was <00:04:52.900>telling <00:04:53.100>us <00:04:53.300>the <00:04:53.500>Freddy <00:04:53.700>was

104
00:04:55.400 --> 00:04:58.500
<00:04:55.400>dying. <00:04:55.555>So <00:04:55.711>there <00:04:55.866>was <00:04:56.022>a <00:04:56.177>secret <00:04:56.333>it <00:04:56.488>was <00:04:56.644>really <00:04:56.799>nice

105
00:04:58.500 --> 00:05:01.300
<00:04:58.500>Secret <00:04:58.850>inside <00:04:59.200>nice <00:04:59.550>in <00:04:59.900>the

106
00:05:01.300 --> 00:05:04.800
<00:05:01.300>sense <00:05:01.475>that <00:05:01.650>not <00:05:01.825>nice <00:05:02.000>because <00:05:02.175>Freddy <00:05:02.350>was <00:05:02.525>was <00:05:02.700>nice

107
00:05:04.800 --> 00:05:08.900
<00:05:04.800>because <00:05:04.975>it <00:05:05.150>you <00:05:05.325>know, <00:05:05.500>it <00:05:05.675>was <00:05:05.850>the <00:05:06.025>the <00:05:06.200>circle

108
00:05:07.900 --> 00:05:10.600
<00:05:07.900>was <00:05:08.366>closed. <00:05:08.833>Just <00:05:09.299>not

109
00:05:10.600 --> 00:05:13.000
<00:05:10.600>only <00:05:10.880>the <00:05:11.160>lyrics <00:05:11.440>also <00:05:11.720>the <00:05:12.000>keys.

110
00:05:13.600 --> 00:05:17.800
<00:05:13.600>so <00:05:13.800>it <00:05:14.000>was <00:05:14.200>really <00:05:14.400>well <00:05:14.600>thought <00:05:14.800>thing <00:05:15.000>and

111
00:05:19.400 --> 00:05:22.200
<00:05:19.400>this <00:05:19.633>means <00:05:19.866>that <00:05:20.099>the <00:05:20.333>secrets <00:05:20.566>can <00:05:20.799>be

112
00:05:22.200 --> 00:05:25.800
<00:05:22.200>really <00:05:22.433>easy <00:05:22.666>to <00:05:22.900>see <00:05:23.133>like <00:05:23.366>when <00:05:23.599>we

113
00:05:26.100 --> 00:05:29.100
<00:05:26.100>you <00:05:26.333>hear <00:05:26.566>something <00:05:26.800>weird <00:05:27.033>in <00:05:27.266>a <00:05:27.500>song

114
00:05:29.100 --> 00:05:32.100
<00:05:29.100>and <00:05:29.333>you <00:05:29.566>say <00:05:29.800>this <00:05:30.033>this <00:05:30.266>song <00:05:30.500>has

115
00:05:32.100 --> 00:05:35.200
<00:05:32.100>some <00:05:32.275>back <00:05:32.450>mask <00:05:32.625>secret <00:05:32.800>but <00:05:32.975>also <00:05:33.150>in <00:05:33.325>the <00:05:33.500>case

116
00:05:35.200 --> 00:05:39.100
<00:05:35.200>of <00:05:35.307>The <00:05:35.415>Show <00:05:35.523>Must <00:05:35.630>Go <00:05:35.738>On <00:05:35.846>The <00:05:35.953>Secret <00:05:36.061>was <00:05:36.169>more <00:05:36.276>difficult <00:05:36.384>to <00:05:36.492>check <00:05:36.599>but

117
00:05:38.100 --> 00:05:41.200
<00:05:38.100>nothing <00:05:38.450>possible <00:05:38.800>because <00:05:39.150>in <00:05:39.500>the

118
00:05:42.200 --> 00:05:45.900
<00:05:42.200>security <00:05:42.340>World <00:05:42.479>in <00:05:42.620>The <00:05:42.760>Secret <00:05:42.900>World, <00:05:43.039>there <00:05:43.180>is <00:05:43.320>no <00:05:43.460>server <00:05:43.599>bullet.

119
00:05:46.600 --> 00:05:47.500
<00:05:46.600>There <00:05:47.005>is <00:05:47.410>only

120
00:05:48.700 --> 00:05:51.300
<00:05:48.700>Layers <00:05:48.979>and <00:05:49.260>layers <00:05:49.539>and <00:05:49.820>layers <00:05:50.099>of

121
00:05:51.300 --> 00:05:54.600
<00:05:51.300>security <00:05:51.500>like <00:05:51.700>an <00:05:51.900>onion <00:05:52.100>so <00:05:52.300>you <00:05:52.500>can <00:05:52.700>always

122
00:05:54.600 --> 00:05:57.400
<00:05:54.600>break <00:05:54.755>one <00:05:54.911>layer <00:05:55.066>of <00:05:55.222>the <00:05:55.377>security <00:05:55.533>but <00:05:55.688>the <00:05:55.844>important <00:05:56.000>thing

123
00:05:57.400 --> 00:06:00.600
<00:05:57.400>is <00:05:57.575>having <00:05:57.750>another <00:05:57.924>layer <00:05:58.099>of <00:05:58.275>security <00:05:58.450>around <00:05:58.625>and <00:05:58.799>if

124
00:06:00.600 --> 00:06:03.300
<00:06:00.600>this <00:06:00.775>layer <00:06:00.950>is <00:06:01.125>broken <00:06:01.300>than <00:06:01.475>another <00:06:01.650>layer <00:06:01.825>and <00:06:02.000>so

125
00:06:03.300 --> 00:06:06.400
<00:06:03.300>on <00:06:03.500>so <00:06:03.700>just <00:06:03.900>protecting <00:06:04.100>your <00:06:04.300>resources <00:06:04.500>with <00:06:04.700>many

126
00:06:06.400 --> 00:06:07.300
<00:06:06.400>many <00:06:07.210>players.

127
00:06:08.400 --> 00:06:08.700
but

128
00:06:10.500 --> 00:06:13.600
<00:06:10.500>this <00:06:10.655>is <00:06:10.811>for <00:06:10.966>secrets <00:06:11.122>from <00:06:11.277>the <00:06:11.433>Securities <00:06:11.588>and <00:06:11.744>really <00:06:11.900>quick

129
00:06:13.600 --> 00:06:16.800
<00:06:13.600>interaction. <00:06:13.880>But <00:06:14.160>what <00:06:14.440>is <00:06:14.720>devops <00:06:15.000>guitars,

130
00:06:16.800 --> 00:06:20.400
<00:06:16.800>right? <00:06:16.940>Because <00:06:17.080>at <00:06:17.220>the <00:06:17.360>end <00:06:17.500>we <00:06:17.640>are <00:06:17.780>just <00:06:17.920>talking <00:06:18.060>about <00:06:18.200>githubs

131
00:06:19.400 --> 00:06:21.300
<00:06:19.400>and <00:06:20.799>devops.

132
00:06:22.600 --> 00:06:25.800
<00:06:22.600>But <00:06:22.800>what <00:06:23.000>is <00:06:23.200>exactly <00:06:23.400>this? <00:06:23.600>Okay <00:06:23.800>devops <00:06:24.000>is

133
00:06:25.800 --> 00:06:28.000
<00:06:25.800>the <00:06:26.000>key <00:06:26.200>to <00:06:26.400>meet <00:06:26.600>the <00:06:26.800>insoluble <00:06:27.000>demand <00:06:27.200>for

134
00:06:28.500 --> 00:06:31.800
<00:06:28.500>delivering <00:06:28.733>quality <00:06:28.966>application <00:06:29.200>rapidly <00:06:29.433>basically <00:06:29.666>depops <00:06:29.900>allows

135
00:06:31.800 --> 00:06:35.500
<00:06:31.800>you <00:06:32.033>to <00:06:32.266>go <00:06:32.500>to <00:06:32.733>production <00:06:32.966>faster. <00:06:33.200>Basically

136
00:06:34.500 --> 00:06:37.800
<00:06:34.500>it <00:06:34.850>helps <00:06:35.200>you <00:06:35.550>what <00:06:35.900>the

137
00:06:37.800 --> 00:06:40.300
<00:06:37.800>last <00:06:38.150>mile <00:06:38.500>The <00:06:38.850>Last <00:06:39.200>Mile

138
00:06:40.300 --> 00:06:43.500
<00:06:40.300>where <00:06:40.533>you're <00:06:40.766>trying <00:06:41.000>to <00:06:41.233>put <00:06:41.466>an <00:06:41.700>application

139
00:06:43.500 --> 00:06:46.900
<00:06:43.500>that <00:06:43.780>is <00:06:44.060>already <00:06:44.340>developed <00:06:44.620>tests <00:06:44.900>one

140
00:06:46.900 --> 00:06:49.600
<00:06:46.900>from <00:06:47.366>your <00:06:47.833>machines <00:06:48.299>to

141
00:06:49.600 --> 00:06:52.500
<00:06:49.600>the <00:06:49.880>production <00:06:50.160>machines <00:06:50.440>and <00:06:50.720>the <00:06:51.000>star

142
00:06:52.500 --> 00:06:56.100
<00:06:52.500>sending <00:06:52.780>public <00:06:53.060>traffic <00:06:53.340>to <00:06:53.620>it <00:06:53.900>that

143
00:06:55.100 --> 00:06:59.300
<00:06:55.100>is <00:06:55.380>what <00:06:55.660>devops <00:06:55.940>helps. <00:06:56.220>But <00:06:56.500>you

144
00:06:58.300 --> 00:07:01.100
<00:06:58.300>know <00:06:58.766>that <00:06:59.233>when <00:06:59.700>you're

145
00:07:01.100 --> 00:07:05.400
<00:07:01.100>trying <00:07:01.333>to <00:07:01.566>release <00:07:01.800>an <00:07:02.033>application <00:07:02.266>to <00:07:02.500>production,

146
00:07:04.400 --> 00:07:08.000
<00:07:04.400>okay, <00:07:04.679>things <00:07:04.960>are <00:07:05.239>not <00:07:05.520>really <00:07:05.799>easy,

147
00:07:07.300 --> 00:07:10.600
<00:07:07.300>right? <00:07:07.533>We've <00:07:07.766>got <00:07:08.000>all <00:07:08.233>these <00:07:08.466>nuts <00:07:08.700>of

148
00:07:12.300 --> 00:07:16.300
<00:07:12.300>Up, <00:07:12.427>you <00:07:12.554>know <00:07:12.681>of <00:07:12.809>code <00:07:12.936>that <00:07:13.063>needs <00:07:13.190>to <00:07:13.318>put <00:07:13.445>on <00:07:13.572>production. <00:07:13.700>Usually

149
00:07:15.300 --> 00:07:18.900
<00:07:15.300>when <00:07:15.500>you've <00:07:15.700>got <00:07:15.900>this <00:07:16.100>big <00:07:16.300>big <00:07:16.500>ball, <00:07:16.700>it's

150
00:07:18.900 --> 00:07:20.900
<00:07:18.900>because <00:07:19.179>you <00:07:19.460>are <00:07:19.739>not <00:07:20.020>delivering <00:07:20.299>every

151
00:07:22.100 --> 00:07:23.400
<00:07:22.100>Day, <00:07:22.685>you're <00:07:23.270>delivering.

152
00:07:24.500 --> 00:07:26.600
<00:07:24.500>every <00:07:24.640>month <00:07:24.780>so <00:07:24.920>you've <00:07:25.060>got <00:07:25.200>a <00:07:25.340>lot <00:07:25.480>of <00:07:25.620>code <00:07:25.760>to <00:07:25.900>be

153
00:07:27.300 --> 00:07:30.000
<00:07:27.300>Deployed <00:07:27.455>to <00:07:27.611>production <00:07:27.766>and <00:07:27.922>why <00:07:28.077>we <00:07:28.233>can <00:07:28.388>see <00:07:28.544>a <00:07:28.700>lot

154
00:07:30.200 --> 00:07:33.200
<00:07:30.200>of <00:07:30.340>people <00:07:30.479>here. <00:07:30.620>So <00:07:30.760>the <00:07:30.900>result <00:07:31.039>with <00:07:31.180>someone <00:07:31.320>who <00:07:31.460>trying <00:07:31.599>to

155
00:07:33.200 --> 00:07:36.500
<00:07:33.200>say <00:07:33.400>no, <00:07:33.599>no <00:07:33.800>don't <00:07:34.000>go <00:07:34.200>to <00:07:34.400>production. <00:07:34.599>Usually

156
00:07:36.500 --> 00:07:39.500
<00:07:36.500>the <00:07:36.640>product <00:07:36.780>owner. <00:07:36.920>Right? <00:07:37.060>Let's <00:07:37.200>say <00:07:37.340>I'm <00:07:37.480>not <00:07:37.620>sure <00:07:37.760>we <00:07:37.900>are

157
00:07:39.500 --> 00:07:42.300
<00:07:39.500>ready <00:07:39.640>to <00:07:39.780>go <00:07:39.920>to <00:07:40.060>production. <00:07:40.200>So <00:07:40.340>just <00:07:40.480>stop <00:07:40.620>or <00:07:40.760>maybe <00:07:40.900>it's

158
00:07:42.300 --> 00:07:45.500
<00:07:42.300>a <00:07:42.500>security <00:07:42.700>team <00:07:42.900>nothing <00:07:43.100>say, <00:07:43.300>oh, <00:07:43.500>please <00:07:43.700>know

159
00:07:45.500 --> 00:07:48.400
<00:07:45.500>that <00:07:45.655>yeah, <00:07:45.811>we <00:07:45.966>are <00:07:46.122>not <00:07:46.277>security <00:07:46.433>enough, <00:07:46.588>right? <00:07:46.744>So <00:07:46.900>there's

160
00:07:48.400 --> 00:07:51.300
<00:07:48.400>someone <00:07:48.599>trying <00:07:48.799>to <00:07:49.000>push <00:07:49.200>back <00:07:49.400>the <00:07:49.599>release <00:07:49.799>of

161
00:07:51.300 --> 00:07:54.600
<00:07:51.300>course, <00:07:51.475>all <00:07:51.650>the <00:07:51.825>developers <00:07:52.000>are <00:07:52.175>saying <00:07:52.350>here. <00:07:52.525>Oh, <00:07:52.700>please

162
00:07:54.600 --> 00:07:57.000
<00:07:54.600>we <00:07:54.727>want <00:07:54.854>to <00:07:54.981>go <00:07:55.109>to <00:07:55.236>production. <00:07:55.363>We <00:07:55.490>want <00:07:55.618>to <00:07:55.745>show <00:07:55.872>all <00:07:56.000>of

163
00:07:57.300 --> 00:07:59.100
<00:07:57.300>you <00:07:57.766>this <00:07:58.233>new <00:07:58.700>features.

164
00:07:59.600 --> 00:08:02.100
<00:07:59.600>Then <00:07:59.775>we've <00:07:59.950>got <00:08:00.125>this <00:08:00.300>guy <00:08:00.475>probably <00:08:00.650>this <00:08:00.825>guy <00:08:01.000>is

165
00:08:02.100 --> 00:08:05.900
<00:08:02.100>the <00:08:02.216>architect <00:08:02.333>right <00:08:02.450>the <00:08:02.566>digital, <00:08:02.683>you <00:08:02.800>know <00:08:02.916>surfing <00:08:03.033>on <00:08:03.150>top <00:08:03.266>of <00:08:03.383>this <00:08:03.500>code.

166
00:08:05.900 --> 00:08:08.400
<00:08:05.900>Oh, <00:08:06.099>my <00:08:06.299>God <00:08:06.500>is <00:08:06.700>super <00:08:06.900>cool <00:08:07.099>and <00:08:07.299>we

167
00:08:08.400 --> 00:08:11.200
<00:08:08.400>are <00:08:08.575>connected <00:08:08.750>super <00:08:08.924>well <00:08:09.099>and <00:08:09.275>you <00:08:09.450>know <00:08:09.625>surfing <00:08:09.799>there.

168
00:08:12.300 --> 00:08:12.800
probably

169
00:08:13.300 --> 00:08:15.000
<00:08:13.300>and <00:08:13.580>then <00:08:13.860>there <00:08:14.140>is <00:08:14.420>this <00:08:14.700>guy.

170
00:08:16.100 --> 00:08:20.500
<00:08:16.100>Yeah, <00:08:16.275>probably <00:08:16.450>is <00:08:16.625>a <00:08:16.800>DBA <00:08:16.975>right <00:08:17.150>the <00:08:17.325>devias. <00:08:17.500>Well,

171
00:08:19.500 --> 00:08:22.300
<00:08:19.500>sorry <00:08:19.675>for <00:08:19.850>the <00:08:20.025>dvas. <00:08:20.200>But <00:08:20.375>you <00:08:20.550>know <00:08:20.725>that <00:08:20.900>all

172
00:08:22.300 --> 00:08:25.900
<00:08:22.300>the <00:08:22.500>oh, <00:08:22.700>he's <00:08:22.900>trying <00:08:23.100>to <00:08:23.300>don't <00:08:23.500>be <00:08:23.700>don't

173
00:08:25.900 --> 00:08:28.700
<00:08:25.900>delete <00:08:26.075>anything <00:08:26.250>and <00:08:26.424>so <00:08:26.599>on. <00:08:26.775>So <00:08:26.950>yeah, <00:08:27.125>okay. <00:08:27.299>That's

174
00:08:28.700 --> 00:08:31.400
<00:08:28.700>the <00:08:28.933>process <00:08:29.166>of <00:08:29.400>trying <00:08:29.633>to <00:08:29.866>release <00:08:30.099>to

175
00:08:31.400 --> 00:08:31.700
production.

176
00:08:32.600 --> 00:08:35.600
<00:08:32.600>And <00:08:32.740>the <00:08:32.880>big <00:08:33.020>problem <00:08:33.159>is <00:08:33.300>that <00:08:33.440>this <00:08:33.580>is <00:08:33.720>not <00:08:33.860>happening. <00:08:34.000>Just

177
00:08:35.600 --> 00:08:38.500
<00:08:35.600>once <00:08:35.880>it <00:08:36.159>happens <00:08:36.440>one <00:08:36.720>every <00:08:37.000>six

178
00:08:38.500 --> 00:08:41.600
<00:08:38.500>months. <00:08:38.700>So <00:08:38.900>every <00:08:39.100>six <00:08:39.299>months, <00:08:39.500>we <00:08:39.700>repeat <00:08:39.900>the

179
00:08:41.600 --> 00:08:44.400
<00:08:41.600>same <00:08:41.880>ceremony <00:08:42.159>ceremony <00:08:42.440>of <00:08:42.720>trying <00:08:43.000>to

180
00:08:44.400 --> 00:08:48.000
<00:08:44.400>reach <00:08:44.574>the <00:08:44.750>production <00:08:44.925>having <00:08:45.100>a <00:08:45.275>lot <00:08:45.449>of <00:08:45.625>problems <00:08:45.800>and

181
00:08:47.300 --> 00:08:50.400
<00:08:47.300>so <00:08:47.500>on. <00:08:47.699>So <00:08:47.900>we <00:08:48.099>need <00:08:48.300>to <00:08:48.500>try <00:08:48.699>to

182
00:08:50.400 --> 00:08:53.700
<00:08:50.400>get <00:08:50.750>is <00:08:51.100>that <00:08:51.449>the <00:08:51.800>process

183
00:08:53.700 --> 00:08:56.300
<00:08:53.700>of <00:08:53.933>delivering <00:08:54.166>to <00:08:54.400>production <00:08:54.633>as <00:08:54.866>a <00:08:55.100>smooth

184
00:08:56.300 --> 00:08:57.600
<00:08:56.300>as <00:08:57.470>possible?

185
00:08:58.300 --> 00:09:01.500
<00:08:58.300>And <00:08:58.533>just <00:08:58.766>being <00:08:59.000>a <00:08:59.233>small <00:08:59.466>piece <00:08:59.699>of

186
00:09:01.500 --> 00:09:05.000
<00:09:01.500>code <00:09:01.733>that <00:09:01.966>just <00:09:02.200>rolling <00:09:02.433>up <00:09:02.666>the <00:09:02.900>the

187
00:09:04.300 --> 00:09:07.800
<00:09:04.300>hill <00:09:04.474>and <00:09:04.650>then <00:09:04.824>you <00:09:05.000>can <00:09:05.175>just <00:09:05.349>let <00:09:05.525>fall <00:09:05.699>down

188
00:09:07.800 --> 00:09:09.100
<00:09:07.800>to <00:09:08.970>production.

189
00:09:10.100 --> 00:09:12.500
<00:09:10.100>And <00:09:10.255>this <00:09:10.411>is <00:09:10.566>exactly <00:09:10.722>what <00:09:10.877>you <00:09:11.033>can <00:09:11.188>get <00:09:11.344>it <00:09:11.500>with.

190
00:09:13.100 --> 00:09:16.800
<00:09:13.100>Devops, <00:09:13.275>but <00:09:13.450>what <00:09:13.625>is <00:09:13.800>deducts <00:09:13.975>because <00:09:14.150>it's <00:09:14.325>about <00:09:14.500>devops

191
00:09:16.800 --> 00:09:19.200
<00:09:16.800>and <00:09:17.000>githubs <00:09:17.199>githubs <00:09:17.400>at <00:09:17.599>the <00:09:17.800>end. <00:09:18.000>We <00:09:18.199>can

192
00:09:19.200 --> 00:09:21.500
<00:09:19.200>say <00:09:19.666>that <00:09:20.133>except <00:09:20.600>implementation.

193
00:09:22.300 --> 00:09:25.200
<00:09:22.300>Of <00:09:22.533>the <00:09:22.766>box <00:09:23.000>or <00:09:23.233>a <00:09:23.466>methodology <00:09:23.699>that

194
00:09:25.200 --> 00:09:26.200
<00:09:25.200>helps <00:09:25.500>us <00:09:25.800>to <00:09:26.100>implement.

195
00:09:27.200 --> 00:09:31.100
<00:09:27.200>Devote <00:09:27.480>basically <00:09:27.760>with <00:09:28.040>idups. <00:09:28.320>He <00:09:28.600>is

196
00:09:30.100 --> 00:09:34.300
<00:09:30.100>the <00:09:30.380>single <00:09:30.660>source <00:09:30.940>of <00:09:31.220>Truth. <00:09:31.500>Everything

197
00:09:33.300 --> 00:09:36.300
<00:09:33.300>that <00:09:33.579>is <00:09:33.859>in <00:09:34.140>git <00:09:34.420>is <00:09:34.699>what

198
00:09:36.300 --> 00:09:39.800
<00:09:36.300>is <00:09:36.455>on <00:09:36.611>production <00:09:36.766>if <00:09:36.922>it's <00:09:37.077>not <00:09:37.233>in <00:09:37.388>it, <00:09:37.544>then <00:09:37.699>it

199
00:09:39.800 --> 00:09:41.400
<00:09:39.800>means <00:09:40.079>that <00:09:40.359>it's <00:09:40.640>not <00:09:40.920>in <00:09:41.199>production.

200
00:09:42.600 --> 00:09:45.700
<00:09:42.600>this <00:09:42.833>helps <00:09:43.066>you <00:09:43.300>to <00:09:43.533>treat <00:09:43.766>everything <00:09:44.000>as

201
00:09:45.700 --> 00:09:49.400
<00:09:45.700>code <00:09:45.875>means <00:09:46.050>that <00:09:46.225>when <00:09:46.400>you <00:09:46.575>want <00:09:46.750>to <00:09:46.925>deploy <00:09:47.100>and

202
00:09:48.400 --> 00:09:52.200
<00:09:48.400>release <00:09:48.633>a <00:09:48.866>new <00:09:49.100>application <00:09:49.333>to <00:09:49.566>production <00:09:49.800>you

203
00:09:51.200 --> 00:09:52.400
<00:09:51.200>just <00:09:51.740>need <00:09:52.280>to

204
00:09:53.800 --> 00:09:56.700
<00:09:53.800>make <00:09:54.079>some <00:09:54.359>kind <00:09:54.640>of <00:09:54.920>code <00:09:55.199>changes

205
00:09:56.700 --> 00:09:59.300
<00:09:56.700>in <00:09:56.900>this <00:09:57.100>good <00:09:57.300>repo <00:09:57.500>do <00:09:57.700>a <00:09:57.900>push <00:09:58.100>and

206
00:10:00.600 --> 00:10:04.400
<00:10:00.600>The <00:10:00.833>process <00:10:01.066>goes <00:10:01.300>to <00:10:01.533>production <00:10:01.766>automatically. <00:10:02.000>Also

207
00:10:03.400 --> 00:10:06.400
<00:10:03.400>this <00:10:03.866>means <00:10:04.333>that <00:10:04.800>you

208
00:10:06.400 --> 00:10:09.300
<00:10:06.400>can <00:10:06.574>do <00:10:06.750>all <00:10:06.925>these <00:10:07.100>operations <00:10:07.275>through <00:10:07.449>good <00:10:07.625>workflows. <00:10:07.800>So

209
00:10:09.300 --> 00:10:12.500
<00:10:09.300>it's <00:10:09.455>not <00:10:09.611>necessary <00:10:09.766>to <00:10:09.922>just <00:10:10.077>do <00:10:10.233>a <00:10:10.388>change <00:10:10.544>on <00:10:10.699>the

210
00:10:12.500 --> 00:10:15.200
<00:10:12.500>main <00:10:12.675>branch <00:10:12.850>and <00:10:13.025>this <00:10:13.200>branch <00:10:13.375>is <00:10:13.550>just <00:10:13.725>reflected <00:10:13.900>to

211
00:10:15.200 --> 00:10:17.700
<00:10:15.200>production. <00:10:15.375>You <00:10:15.550>can <00:10:15.725>for <00:10:15.900>example <00:10:16.075>create <00:10:16.250>a <00:10:16.425>poor <00:10:16.600>request.

212
00:10:18.100 --> 00:10:20.100
<00:10:18.100>And <00:10:18.566>you <00:10:19.033>can <00:10:19.500>test.

213
00:10:20.900 --> 00:10:23.200
<00:10:20.900>this <00:10:21.600>infrastructure <00:10:22.300>changes

214
00:10:24.300 --> 00:10:27.800
<00:10:24.300>before <00:10:24.427>going <00:10:24.554>to <00:10:24.681>production. <00:10:24.809>So <00:10:24.936>for <00:10:25.063>example, <00:10:25.190>you <00:10:25.318>can <00:10:25.445>say <00:10:25.572>every <00:10:25.699>time

215
00:10:27.800 --> 00:10:30.800
<00:10:27.800>that <00:10:27.974>there <00:10:28.150>is <00:10:28.324>a <00:10:28.500>pull <00:10:28.675>request <00:10:28.849>of <00:10:29.025>an <00:10:29.199>infrastructure

216
00:10:30.800 --> 00:10:33.200
<00:10:30.800>change. <00:10:31.033>I've <00:10:31.266>got <00:10:31.500>an <00:10:31.733>mburement <00:10:31.966>where <00:10:32.199>I

217
00:10:33.200 --> 00:10:33.900
<00:10:33.200>test <00:10:33.829>them.

218
00:10:34.600 --> 00:10:37.500
<00:10:34.600>Or <00:10:34.775>also, <00:10:34.950>I <00:10:35.125>can <00:10:35.300>have <00:10:35.475>several <00:10:35.650>branches <00:10:35.825>when <00:10:36.000>branch

219
00:10:37.500 --> 00:10:40.300
<00:10:37.500>which <00:10:37.607>is <00:10:37.715>the <00:10:37.823>main <00:10:37.930>branch <00:10:38.038>which <00:10:38.146>is <00:10:38.253>the <00:10:38.361>production <00:10:38.469>but <00:10:38.576>I <00:10:38.684>can <00:10:38.792>have <00:10:38.900>also

220
00:10:40.300 --> 00:10:44.400
<00:10:40.300>Branch <00:10:40.533>name <00:10:40.766>it <00:10:41.000>pre-production <00:10:41.233>and <00:10:41.466>another <00:10:41.699>staging

221
00:10:43.400 --> 00:10:46.900
<00:10:43.400>and <00:10:43.750>another <00:10:44.100>performance <00:10:44.449>and <00:10:44.800>in

222
00:10:46.900 --> 00:10:49.300
<00:10:46.900>each <00:10:47.180>of <00:10:47.459>these <00:10:47.740>branches <00:10:48.020>any <00:10:48.300>changes

223
00:10:49.300 --> 00:10:52.000
<00:10:49.300>that <00:10:49.474>they <00:10:49.650>are <00:10:49.824>done. <00:10:50.000>These <00:10:50.175>changes <00:10:50.349>are <00:10:50.525>reflected <00:10:50.699>to

224
00:10:52.300 --> 00:10:55.300
<00:10:52.300>each <00:10:52.533>of <00:10:52.766>the <00:10:53.000>impairments <00:10:53.233>not <00:10:53.466>in <00:10:53.699>the

225
00:10:55.300 --> 00:10:58.300
<00:10:55.300>production. <00:10:55.533>So <00:10:55.766>you <00:10:56.000>see <00:10:56.233>that <00:10:56.466>things <00:10:56.699>of

226
00:10:58.300 --> 00:10:58.900
guitars.

227
00:11:00.300 --> 00:11:04.300
<00:11:00.300>We <00:11:00.474>just <00:11:00.650>do <00:11:00.824>changes <00:11:01.000>in <00:11:01.175>give <00:11:01.349>and <00:11:01.525>this <00:11:01.699>changes

228
00:11:03.300 --> 00:11:06.600
<00:11:03.300>are <00:11:03.533>reflected <00:11:03.766>to <00:11:04.000>the <00:11:04.233>production <00:11:04.466>of <00:11:04.699>Yemen.

229
00:11:07.300 --> 00:11:08.100
basically

230
00:11:10.100 --> 00:11:13.600
<00:11:10.100>in <00:11:10.216>my <00:11:10.333>opinion <00:11:10.450>the <00:11:10.566>github's <00:11:10.683>application <00:11:10.800>delivery <00:11:10.916>model <00:11:11.033>is <00:11:11.150>something <00:11:11.266>like <00:11:11.383>this. <00:11:11.500>We've

231
00:11:13.600 --> 00:11:16.600
<00:11:13.600>got <00:11:13.950>two <00:11:14.300>git <00:11:14.650>repositories <00:11:15.000>one

232
00:11:16.600 --> 00:11:19.100
<00:11:16.600>it <00:11:16.775>repository <00:11:16.950>is <00:11:17.125>where <00:11:17.300>there <00:11:17.475>is <00:11:17.650>the <00:11:17.825>source <00:11:18.000>code

233
00:11:19.100 --> 00:11:19.900
<00:11:19.100>of <00:11:19.460>your <00:11:19.819>application.

234
00:11:20.500 --> 00:11:24.100
<00:11:20.500>Well <00:11:20.733>developers <00:11:20.966>push <00:11:21.200>their <00:11:21.433>things <00:11:21.666>so <00:11:21.900>basically

235
00:11:23.100 --> 00:11:26.300
<00:11:23.100>developer <00:11:23.450>just <00:11:23.800>push <00:11:24.150>a <00:11:24.500>change

236
00:11:26.300 --> 00:11:30.000
<00:11:26.300>a <00:11:26.474>new <00:11:26.650>feature. <00:11:26.824>Then <00:11:27.000>there <00:11:27.175>is <00:11:27.349>the <00:11:27.525>continuous <00:11:27.699>integration

237
00:11:29.500 --> 00:11:32.400
<00:11:29.500>part. <00:11:29.733>It <00:11:29.966>can <00:11:30.200>be <00:11:30.433>it <00:11:30.666>have <00:11:30.900>action

238
00:11:32.400 --> 00:11:35.500
<00:11:32.400>can <00:11:32.574>we <00:11:32.750>can <00:11:32.925>turn <00:11:33.100>can <00:11:33.275>be <00:11:33.449>jankins? <00:11:33.625>Okay, <00:11:33.800>but

239
00:11:35.500 --> 00:11:38.900
<00:11:35.500>in <00:11:35.655>any <00:11:35.811>case <00:11:35.966>here, <00:11:36.122>we <00:11:36.277>just <00:11:36.433>run <00:11:36.588>the <00:11:36.744>continuous <00:11:36.900>integration.

240
00:11:38.900 --> 00:11:41.800
<00:11:38.900>We <00:11:39.250>build <00:11:39.600>application <00:11:39.949>test <00:11:40.300>application

241
00:11:41.800 --> 00:11:44.400
<00:11:41.800>do <00:11:42.150>some <00:11:42.500>static <00:11:42.849>code <00:11:43.199>analysis

242
00:11:44.400 --> 00:11:47.200
<00:11:44.400>wherever <00:11:44.680>I'm <00:11:44.959>finally <00:11:45.240>we <00:11:45.520>create <00:11:45.800>a

243
00:11:47.200 --> 00:11:50.500
<00:11:47.200>container <00:11:47.550>and <00:11:47.900>this <00:11:48.250>container <00:11:48.600>finally

244
00:11:50.500 --> 00:11:52.300
<00:11:50.500>is <00:11:50.850>push <00:11:51.200>to <00:11:51.550>an <00:11:51.900>image.

245
00:11:53.400 --> 00:11:56.400
<00:11:53.400>Then <00:11:53.680>after <00:11:53.959>that <00:11:54.240>my <00:11:54.520>continuous <00:11:54.800>integration

246
00:11:56.400 --> 00:11:59.500
<00:11:56.400>part <00:11:56.866>creates <00:11:57.333>a <00:11:57.800>poor

247
00:11:59.500 --> 00:12:03.000
<00:11:59.500>request <00:11:59.700>to <00:11:59.900>The <00:12:00.100>Confident <00:12:00.300>repository <00:12:00.500>this <00:12:00.700>topic <00:12:00.900>in

248
00:12:02.000 --> 00:12:03.400
Repository.

249
00:12:04.200 --> 00:12:07.800
<00:12:04.200>Is <00:12:04.433>the <00:12:04.666>repository <00:12:04.900>where <00:12:05.133>we <00:12:05.366>store <00:12:05.600>all

250
00:12:07.800 --> 00:12:11.300
<00:12:07.800>the <00:12:08.079>code <00:12:08.359>related <00:12:08.640>to <00:12:08.920>the <00:12:09.199>plowing

251
00:12:10.300 --> 00:12:13.600
<00:12:10.300>and <00:12:10.766>releasing <00:12:11.233>the <00:12:11.699>application?

252
00:12:14.600 --> 00:12:17.500
<00:12:14.600>In <00:12:14.775>case <00:12:14.950>of <00:12:15.125>kubernetes <00:12:15.300>just <00:12:15.475>a <00:12:15.650>bunch <00:12:15.825>of <00:12:16.000>General

253
00:12:17.500 --> 00:12:20.900
<00:12:17.500>files. <00:12:17.700>The <00:12:17.900>problem <00:12:18.100>files <00:12:18.300>you're <00:12:18.500>gonna <00:12:18.700>Services, <00:12:18.900>you

254
00:12:20.900 --> 00:12:23.100
<00:12:20.900>know <00:12:21.100>files <00:12:21.300>Ingress. <00:12:21.500>Yeah, <00:12:21.699>you <00:12:21.900>know <00:12:22.100>files <00:12:22.300>and

255
00:12:23.100 --> 00:12:24.200
<00:12:23.100>so <00:12:23.347>on <00:12:23.595>so <00:12:23.842>just <00:12:24.090>yeah.

256
00:12:24.700 --> 00:12:27.600
<00:12:24.700>So <00:12:24.900>when <00:12:25.100>we <00:12:25.300>finish <00:12:25.500>to <00:12:25.700>build <00:12:25.900>up <00:12:26.100>the

257
00:12:27.600 --> 00:12:30.100
<00:12:27.600>container <00:12:27.755>image, <00:12:27.911>we <00:12:28.066>just <00:12:28.222>set <00:12:28.377>up <00:12:28.533>a <00:12:28.688>request <00:12:28.844>saying <00:12:29.000>hey,

258
00:12:30.100 --> 00:12:33.600
<00:12:30.100>I've <00:12:30.300>got <00:12:30.500>a <00:12:30.700>new <00:12:30.900>version <00:12:31.100>to <00:12:31.300>be <00:12:31.500>deliberate.

259
00:12:34.800 --> 00:12:37.900
<00:12:34.800>Here <00:12:35.000>is <00:12:35.199>a <00:12:35.400>pull <00:12:35.599>request. <00:12:35.800>Someone <00:12:36.000>could <00:12:36.199>review

260
00:12:37.900 --> 00:12:40.300
<00:12:37.900>this <00:12:38.180>pull <00:12:38.459>request <00:12:38.740>merge <00:12:39.020>the <00:12:39.300>Puerto

261
00:12:40.300 --> 00:12:40.800
<00:12:40.300>Rico's <00:12:40.750>from

262
00:12:41.600 --> 00:12:44.100
<00:12:41.600>the <00:12:41.833>pull <00:12:42.066>request <00:12:42.300>repo <00:12:42.533>to <00:12:42.766>the <00:12:43.000>main

263
00:12:44.100 --> 00:12:47.600
<00:12:44.100>branch <00:12:44.380>and <00:12:44.660>then <00:12:44.940>starts <00:12:45.220>the <00:12:45.500>continuous

264
00:12:47.600 --> 00:12:48.700
<00:12:47.600>delivery <00:12:48.590>part.

265
00:12:49.700 --> 00:12:52.400
<00:12:49.700>This <00:12:49.933>continuous <00:12:50.166>delivery <00:12:50.400>part <00:12:50.633>just <00:12:50.866>take <00:12:51.100>the

266
00:12:52.400 --> 00:12:56.300
<00:12:52.400>changes <00:12:52.633>and <00:12:52.866>deploy <00:12:53.100>to <00:12:53.333>Humanities <00:12:53.566>how <00:12:53.800>this

267
00:12:55.300 --> 00:12:58.800
<00:12:55.300>works <00:12:55.650>this <00:12:56.000>continuously <00:12:56.349>part. <00:12:56.699>Okay.

268
00:12:58.800 --> 00:13:01.900
<00:12:58.800>There <00:12:59.000>are <00:12:59.199>a <00:12:59.400>lot <00:12:59.599>of <00:12:59.800>different <00:13:00.000>Technologies <00:13:00.199>out

269
00:13:01.900 --> 00:13:05.000
<00:13:01.900>there. <00:13:02.040>In <00:13:02.180>this <00:13:02.319>case. <00:13:02.459>I'm <00:13:02.600>going <00:13:02.740>to <00:13:02.880>show <00:13:03.020>you <00:13:03.160>our <00:13:03.300>go

270
00:13:04.300 --> 00:13:08.300
<00:13:04.300>CD <00:13:04.500>which <00:13:04.699>is <00:13:04.900>this <00:13:05.099>logo <00:13:05.300>and <00:13:05.500>basically <00:13:05.699>argosity

271
00:13:07.300 --> 00:13:10.600
<00:13:07.300>is <00:13:07.650>a <00:13:08.000>humanitous <00:13:08.349>controller <00:13:08.699>that

272
00:13:10.600 --> 00:13:14.200
<00:13:10.600>it's <00:13:10.833>monitoring <00:13:11.066>all <00:13:11.300>the <00:13:11.533>time <00:13:11.766>this <00:13:12.000>completely

273
00:13:13.200 --> 00:13:16.500
<00:13:13.200>repository <00:13:13.550>detecting <00:13:13.900>a <00:13:14.250>dream. <00:13:14.600>So

274
00:13:16.500 --> 00:13:20.400
<00:13:16.500>it's <00:13:16.700>just <00:13:16.900>that <00:13:17.100>thing <00:13:17.300>when <00:13:17.500>someone <00:13:17.700>changes <00:13:17.900>any

275
00:13:19.400 --> 00:13:22.400
<00:13:19.400>of <00:13:19.680>these <00:13:19.959>young <00:13:20.240>files <00:13:20.520>for <00:13:20.800>example

276
00:13:22.400 --> 00:13:26.000
<00:13:22.400>changes <00:13:22.680>Amel <00:13:22.959>file <00:13:23.240>because <00:13:23.520>we <00:13:23.800>said

277
00:13:25.600 --> 00:13:28.500
<00:13:25.600>a <00:13:26.066>new <00:13:26.533>continent <00:13:27.000>in

278
00:13:28.500 --> 00:13:29.300
<00:13:28.500>the <00:13:28.860>deployment <00:13:29.219>file.

279
00:13:30.500 --> 00:13:32.300
<00:13:30.500>That <00:13:30.733>that's <00:13:30.966>the <00:13:31.200>dream <00:13:31.433>and <00:13:31.666>take <00:13:31.900>action.

280
00:13:33.500 --> 00:13:35.800
<00:13:33.500>Are <00:13:33.733>we <00:13:33.966>still <00:13:34.200>just <00:13:34.433>take <00:13:34.666>the <00:13:34.900>requisances?

281
00:13:36.900 --> 00:13:38.600
<00:13:36.900>This <00:13:37.100>is <00:13:37.300>a <00:13:37.500>deployment <00:13:37.699>file <00:13:37.900>that <00:13:38.100>has <00:13:38.300>changed.

282
00:13:40.200 --> 00:13:44.000
<00:13:40.200>You <00:13:40.340>set <00:13:40.480>it <00:13:40.620>a <00:13:40.760>new <00:13:40.900>image. <00:13:41.040>Okay, <00:13:41.180>let's <00:13:41.320>deploy <00:13:41.460>these <00:13:41.600>deployment

283
00:13:43.200 --> 00:13:46.900
<00:13:43.200>file <00:13:43.433>and <00:13:43.666>finally <00:13:43.900>it <00:13:44.133>deploys <00:13:44.366>this <00:13:44.600>new

284
00:13:46.900 --> 00:13:49.500
<00:13:46.900>version <00:13:47.133>of <00:13:47.366>the <00:13:47.600>application <00:13:47.833>into <00:13:48.066>kubernetes <00:13:48.300>and

285
00:13:49.500 --> 00:13:53.100
<00:13:49.500>we <00:13:49.733>start <00:13:49.966>again <00:13:50.200>monitoring <00:13:50.433>for <00:13:50.666>you <00:13:50.900>changes.

286
00:13:52.100 --> 00:13:55.500
<00:13:52.100>Okay. <00:13:52.380>So <00:13:52.660>this <00:13:52.940>is <00:13:53.220>how <00:13:53.500>the

287
00:13:55.500 --> 00:13:58.200
<00:13:55.500>githubs <00:13:55.733>work. <00:13:55.966>So <00:13:56.200>let <00:13:56.433>me <00:13:56.666>just <00:13:56.900>show

288
00:13:58.200 --> 00:14:00.300
<00:13:58.200>you <00:13:58.480>a <00:13:58.760>really <00:13:59.040>quick <00:13:59.320>demo <00:13:59.600>about

289
00:14:01.500 --> 00:14:04.400
<00:14:01.500>Advocacy <00:14:01.780>I've <00:14:02.060>got <00:14:02.340>here <00:14:02.620>my <00:14:02.900>community

290
00:14:04.400 --> 00:14:05.000
<00:14:04.400>this <00:14:04.940>cluster.

291
00:14:06.100 --> 00:14:10.100
<00:14:06.100>with <00:14:06.275>um, <00:14:06.450>you <00:14:06.625>see <00:14:06.800>here <00:14:06.975>is <00:14:07.150>my <00:14:07.325>my <00:14:07.500>other

292
00:14:09.100 --> 00:14:11.700
<00:14:09.100>CD <00:14:09.800>dashboard <00:14:10.500>and

293
00:14:13.400 --> 00:14:16.000
<00:14:13.400>I've <00:14:13.750>got <00:14:14.100>an <00:14:14.449>application <00:14:14.800>here.

294
00:14:17.100 --> 00:14:20.500
<00:14:17.100>Basically, <00:14:17.255>this <00:14:17.411>is <00:14:17.566>an <00:14:17.722>application. <00:14:17.877>It's <00:14:18.033>a <00:14:18.188>to-do <00:14:18.344>application <00:14:18.500>that

295
00:14:21.300 --> 00:14:24.500
<00:14:21.300>it's <00:14:21.427>a <00:14:21.554>typical <00:14:21.681>tool <00:14:21.809>application <00:14:21.936>activity <00:14:22.063>and <00:14:22.190>that <00:14:22.318>has <00:14:22.445>a <00:14:22.572>pause <00:14:22.699>great

296
00:14:24.500 --> 00:14:27.400
<00:14:24.500>sequel <00:14:24.780>database. <00:14:25.060>So <00:14:25.340>you <00:14:25.620>see <00:14:25.900>here

297
00:14:27.400 --> 00:14:30.500
<00:14:27.400>that <00:14:27.555>is <00:14:27.711>the <00:14:27.866>to <00:14:28.022>do <00:14:28.177>deployment <00:14:28.333>file <00:14:28.488>which <00:14:28.644>deploys <00:14:28.800>a

298
00:14:30.500 --> 00:14:33.500
<00:14:30.500>to <00:14:30.675>the <00:14:30.850>application <00:14:31.025>to <00:14:31.200>do <00:14:31.375>service <00:14:31.550>for <00:14:31.725>the <00:14:31.900>Ingress

299
00:14:33.500 --> 00:14:36.800
<00:14:33.500>thing <00:14:33.675>and <00:14:33.850>then <00:14:34.025>here <00:14:34.200>I've <00:14:34.375>got <00:14:34.550>the <00:14:34.725>positive <00:14:34.900>sequel

300
00:14:36.800 --> 00:14:39.200
<00:14:36.800>deployment <00:14:36.974>as <00:14:37.150>SQL <00:14:37.324>serves <00:14:37.500>and <00:14:37.675>so <00:14:37.849>on <00:14:38.025>you <00:14:38.199>see

301
00:14:39.200 --> 00:14:41.200
<00:14:39.200>that <00:14:39.433>but <00:14:39.666>a <00:14:39.900>bunch <00:14:40.133>of <00:14:40.366>yellow <00:14:40.600>files.

302
00:14:41.700 --> 00:14:42.700
<00:14:41.700>then <00:14:42.600>how

303
00:14:43.600 --> 00:14:47.100
<00:14:43.600>I <00:14:43.775>received <00:14:43.950>Works <00:14:44.125>how <00:14:44.300>githubs <00:14:44.475>works. <00:14:44.650>Okay <00:14:44.825>here. <00:14:45.000>I

304
00:14:46.100 --> 00:14:49.700
<00:14:46.100>got <00:14:46.333>the <00:14:46.566>yaml <00:14:46.800>file <00:14:47.033>the <00:14:47.266>manifests <00:14:47.500>or

305
00:14:49.700 --> 00:14:53.300
<00:14:49.700>the <00:14:49.933>scripts <00:14:50.166>to <00:14:50.400>deploy <00:14:50.633>the <00:14:50.866>application <00:14:51.100>and

306
00:14:52.300 --> 00:14:55.700
<00:14:52.300>I <00:14:52.579>need <00:14:52.859>to <00:14:53.140>register <00:14:53.420>this <00:14:53.699>give

307
00:14:55.700 --> 00:14:57.100
<00:14:55.700>repository <00:14:56.015>so <00:14:56.330>I <00:14:56.645>need <00:14:56.960>to

308
00:14:57.900 --> 00:15:00.900
<00:14:57.900>Said <00:14:58.250>our <00:14:58.600>OCD. <00:14:58.949>Hey <00:14:59.300>Argos

309
00:15:00.900 --> 00:15:01.100
CD.

310
00:15:01.700 --> 00:15:05.100
<00:15:01.700>This <00:15:01.875>is <00:15:02.050>a <00:15:02.225>repository <00:15:02.400>of <00:15:02.575>great <00:15:02.750>repository. <00:15:02.925>Please <00:15:03.100>monitor

311
00:15:04.100 --> 00:15:07.600
<00:15:04.100>any <00:15:04.450>change <00:15:04.800>and <00:15:05.150>apply <00:15:05.500>this

312
00:15:07.600 --> 00:15:10.900
<00:15:07.600>changes <00:15:07.800>to <00:15:08.000>the <00:15:08.200>kubernetes <00:15:08.400>cluster <00:15:08.600>and <00:15:08.800>I'm <00:15:09.000>just

313
00:15:10.900 --> 00:15:12.300
<00:15:10.900>going <00:15:11.214>I <00:15:11.530>can <00:15:11.844>go <00:15:12.160>here.

314
00:15:13.800 --> 00:15:15.600
<00:15:13.800>I <00:15:13.974>can <00:15:14.150>just <00:15:14.324>show <00:15:14.500>you <00:15:14.675>if <00:15:14.849>you <00:15:15.025>want <00:15:15.199>the

315
00:15:16.600 --> 00:15:20.100
<00:15:16.600>File <00:15:16.755>you <00:15:16.911>see <00:15:17.066>that? <00:15:17.222>It's <00:15:17.377>just <00:15:17.533>a <00:15:17.688>simple <00:15:17.844>a <00:15:18.000>simple

316
00:15:19.100 --> 00:15:23.000
<00:15:19.100>Yaman <00:15:19.380>file <00:15:19.660>super <00:15:19.940>super <00:15:20.220>small <00:15:20.500>what

317
00:15:22.200 --> 00:15:25.900
<00:15:22.200>I <00:15:22.375>said, <00:15:22.550>this <00:15:22.725>is <00:15:22.900>an <00:15:23.075>application <00:15:23.250>of <00:15:23.425>Arco <00:15:23.600>CV

318
00:15:25.900 --> 00:15:29.000
<00:15:25.900>and <00:15:26.133>I'm <00:15:26.366>just <00:15:26.600>configuring <00:15:26.833>here. <00:15:27.066>Where <00:15:27.300>is

319
00:15:28.200 --> 00:15:31.200
<00:15:28.200>the <00:15:28.433>application <00:15:28.666>to <00:15:28.900>the <00:15:29.133>point? <00:15:29.366>I <00:15:29.600>said

320
00:15:31.200 --> 00:15:34.500
<00:15:31.200>URL <00:15:31.375>I <00:15:31.550>said <00:15:31.725>the <00:15:31.900>brand <00:15:32.075>I <00:15:32.250>said <00:15:32.425>the <00:15:32.600>path

321
00:15:34.500 --> 00:15:39.000
<00:15:34.500>and <00:15:34.675>then <00:15:34.850>done. <00:15:35.025>Well, <00:15:35.200>there <00:15:35.375>is <00:15:35.550>some <00:15:35.725>configuration <00:15:35.900>parameters

322
00:15:38.100 --> 00:15:41.500
<00:15:38.100>here, <00:15:38.275>but <00:15:38.450>for <00:15:38.625>now <00:15:38.800>it <00:15:38.975>doesn't <00:15:39.150>matter <00:15:39.325>and <00:15:39.500>I'm

323
00:15:41.500 --> 00:15:44.900
<00:15:41.500>just <00:15:41.733>going <00:15:41.966>to <00:15:42.200>applying <00:15:42.433>there <00:15:42.666>to <00:15:42.900>do

324
00:15:44.900 --> 00:15:45.400
application.

325
00:15:46.500 --> 00:15:49.900
<00:15:46.500>Okay. <00:15:46.675>So <00:15:46.850>what's <00:15:47.025>happening <00:15:47.200>now <00:15:47.375>is <00:15:47.550>that <00:15:47.725>Android <00:15:47.900>history

326
00:15:49.900 --> 00:15:52.800
<00:15:49.900>the <00:15:50.250>application <00:15:50.600>to <00:15:50.949>our <00:15:51.300>city

327
00:15:52.800 --> 00:15:55.500
<00:15:52.800>obviously <00:15:53.079>will <00:15:53.359>notice <00:15:53.640>the <00:15:53.920>change <00:15:54.199>and

328
00:15:55.500 --> 00:15:58.100
<00:15:55.500>will <00:15:55.733>start <00:15:55.966>deploying <00:15:56.200>the <00:15:56.433>application. <00:15:56.666>You <00:15:56.900>can

329
00:15:58.100 --> 00:16:02.300
<00:15:58.100>see <00:15:58.255>here <00:15:58.411>how <00:15:58.566>all <00:15:58.722>the <00:15:58.877>applications <00:15:59.033>been <00:15:59.188>deployed <00:15:59.344>automatically. <00:15:59.500>Okay.

330
00:16:01.300 --> 00:16:04.800
<00:16:01.300>So <00:16:01.766>just <00:16:02.233>easy <00:16:02.699>right

331
00:16:04.800 --> 00:16:07.300
<00:16:04.800>you <00:16:04.955>can <00:16:05.111>pass <00:16:05.266>it <00:16:05.422>as <00:16:05.577>well. <00:16:05.733>You <00:16:05.888>see <00:16:06.044>that <00:16:06.199>is

332
00:16:07.300 --> 00:16:11.400
<00:16:07.300>now <00:16:07.500>sinking <00:16:07.699>everything <00:16:07.900>is <00:16:08.099>sink. <00:16:08.300>So <00:16:08.500>now <00:16:08.699>my

333
00:16:10.400 --> 00:16:13.000
<00:16:10.400>application <00:16:11.800>my

334
00:16:14.400 --> 00:16:17.500
<00:16:14.400>Cluster <00:16:14.866>it's <00:16:15.333>a <00:16:15.800>align

335
00:16:17.500 --> 00:16:21.100
<00:16:17.500>it <00:16:17.780>with <00:16:18.060>this <00:16:18.340>heat <00:16:18.620>repo <00:16:18.900>now.

336
00:16:20.100 --> 00:16:24.100
<00:16:20.100>Any <00:16:20.300>change <00:16:20.500>that <00:16:20.700>I <00:16:20.900>do <00:16:21.100>here. <00:16:21.300>It <00:16:21.500>will

337
00:16:23.100 --> 00:16:27.000
<00:16:23.100>be <00:16:23.450>applied <00:16:23.800>to <00:16:24.150>the <00:16:24.500>cluster.

338
00:16:26.300 --> 00:16:29.300
<00:16:26.300>Okay, <00:16:26.455>which <00:16:26.611>you <00:16:26.766>can <00:16:26.922>see <00:16:27.077>here <00:16:27.233>called <00:16:27.388>application <00:16:27.544>is <00:16:27.699>being

339
00:16:29.300 --> 00:16:32.800
<00:16:29.300>deployed. <00:16:29.439>I <00:16:29.579>can <00:16:29.719>just <00:16:29.859>click <00:16:30.000>it <00:16:30.140>here <00:16:30.280>as <00:16:30.420>well. <00:16:30.560>And <00:16:30.699>if

340
00:16:32.800 --> 00:16:36.600
<00:16:32.800>I <00:16:33.000>go <00:16:33.199>to <00:16:33.400>to <00:16:33.599>do <00:16:33.800>that <00:16:34.000>HTML, <00:16:34.199>you'll

341
00:16:35.600 --> 00:16:39.000
<00:16:35.600>see <00:16:35.775>here <00:16:35.950>that <00:16:36.125>to <00:16:36.300>the <00:16:36.475>application <00:16:36.650>with <00:16:36.825>all <00:16:37.000>that

342
00:16:38.100 --> 00:16:39.700
<00:16:38.100>to <00:16:38.800>those. <00:16:39.500>Okay?

343
00:16:41.300 --> 00:16:45.300
<00:16:41.300>But <00:16:41.455>now <00:16:41.611>it <00:16:41.766>comes <00:16:41.922>the <00:16:42.077>one <00:16:42.233>of <00:16:42.388>the <00:16:42.544>first <00:16:42.699>problems.

344
00:16:46.100 --> 00:16:49.300
<00:16:46.100>You <00:16:46.216>see <00:16:46.333>here. <00:16:46.450>There <00:16:46.566>is <00:16:46.683>the <00:16:46.800>postgrade <00:16:46.916>and <00:16:47.033>if <00:16:47.150>I <00:16:47.266>open <00:16:47.383>the <00:16:47.500>pause

345
00:16:49.300 --> 00:16:51.000
<00:16:49.300>where <00:16:49.766>the <00:16:50.233>deployment <00:16:50.699>oops.

346
00:16:52.200 --> 00:16:55.500
<00:16:52.200>You <00:16:52.340>see <00:16:52.480>that <00:16:52.620>the <00:16:52.760>login <00:16:52.900>and <00:16:53.040>password <00:16:53.180>is <00:16:53.320>just <00:16:53.460>getting <00:16:53.600>playing

347
00:16:55.500 --> 00:16:56.500
text.

348
00:16:57.600 --> 00:16:59.400
<00:16:57.600>Of <00:16:57.833>course, <00:16:58.066>that's <00:16:58.300>not <00:16:58.533>a <00:16:58.766>good <00:16:59.000>idea.

349
00:17:01.100 --> 00:17:04.200
<00:17:01.100>Others <00:17:01.227>might <00:17:01.354>say, <00:17:01.481>oh <00:17:01.609>yes, <00:17:01.736>because <00:17:01.863>you <00:17:01.990>put <00:17:02.118>it <00:17:02.245>here <00:17:02.372>as <00:17:02.500>an

350
00:17:04.200 --> 00:17:07.800
<00:17:04.200>imperial <00:17:04.340>in <00:17:04.480>my <00:17:04.620>case. <00:17:04.760>I <00:17:04.900>would <00:17:05.040>just <00:17:05.180>create <00:17:05.319>a <00:17:05.460>Cuban. <00:17:05.600>It

351
00:17:07.800 --> 00:17:08.700
<00:17:07.800>is <00:17:08.610>Secret.

352
00:17:10.100 --> 00:17:13.500
<00:17:10.099>And <00:17:10.255>that's <00:17:10.411>fine <00:17:10.566>the <00:17:10.722>problem. <00:17:10.877>Is <00:17:11.033>that <00:17:11.188>the <00:17:11.344>kubernetes <00:17:11.500>secret

353
00:17:13.500 --> 00:17:14.200
file.

354
00:17:15.200 --> 00:17:16.200
<00:17:15.200>Is <00:17:15.650>not <00:17:16.100>encrypted.

355
00:17:17.400 --> 00:17:18.000
<00:17:17.400>okay <00:17:17.940>each

356
00:17:19.600 --> 00:17:22.700
<00:17:19.599>stored <00:17:19.949>in <00:17:20.300>base <00:17:20.649>60 <00:17:21.000>four

357
00:17:23.600 --> 00:17:26.500
<00:17:23.599>I <00:17:23.800>think <00:17:24.000>I've <00:17:24.199>got <00:17:24.399>here <00:17:24.599>some <00:17:24.800>example. <00:17:25.000>I

358
00:17:26.500 --> 00:17:29.200
<00:17:26.500>can <00:17:26.675>do <00:17:26.849>a <00:17:27.025>bad <00:17:27.200>secret <00:17:27.375>but <00:17:27.550>General <00:17:27.724>file <00:17:27.900>is

359
00:17:29.200 --> 00:17:32.400
<00:17:29.200>here. <00:17:29.316>This <00:17:29.433>is <00:17:29.550>a <00:17:29.666>Cuban. <00:17:29.783>It's <00:17:29.900>a <00:17:30.016>secret <00:17:30.133>and <00:17:30.250>you <00:17:30.366>say <00:17:30.483>look <00:17:30.600>Alex.

360
00:17:32.400 --> 00:17:35.500
<00:17:32.400>I've <00:17:32.575>got <00:17:32.750>here <00:17:32.925>the <00:17:33.100>greeting <00:17:33.275>but <00:17:33.450>message. <00:17:33.625>Yes, <00:17:33.800>that's

361
00:17:35.500 --> 00:17:35.700
true.

362
00:17:36.600 --> 00:17:41.000
<00:17:36.600>But <00:17:36.949>disease <00:17:37.300>not <00:17:37.649>encryption <00:17:38.000>disease

363
00:17:40.300 --> 00:17:43.200
<00:17:40.300>in <00:17:40.475>covid <00:17:40.649>see <00:17:40.825>that <00:17:41.000>if <00:17:41.175>I <00:17:41.350>do <00:17:41.524>an <00:17:41.700>echo

364
00:17:43.200 --> 00:17:47.000
<00:17:43.200>of <00:17:43.433>this <00:17:43.666>file <00:17:43.900>with <00:17:44.133>b64 <00:17:44.366>decode <00:17:44.600>you

365
00:17:46.100 --> 00:17:49.200
<00:17:46.100>see <00:17:46.255>that <00:17:46.411>the <00:17:46.566>message <00:17:46.722>is <00:17:46.877>hello. <00:17:47.033>So <00:17:47.188>yes, <00:17:47.344>you're <00:17:47.500>gonna

366
00:17:49.200 --> 00:17:52.400
<00:17:49.200>store <00:17:49.375>secrets <00:17:49.550>in <00:17:49.725>a <00:17:49.900>kubernetes <00:17:50.075>secret <00:17:50.250>yellow <00:17:50.425>file, <00:17:50.600>but

367
00:17:52.400 --> 00:17:56.300
<00:17:52.400>when <00:17:52.575>you <00:17:52.750>store <00:17:52.925>it <00:17:53.100>inside <00:17:53.275>the <00:17:53.450>git <00:17:53.625>repository <00:17:53.800>everyone

368
00:17:55.300 --> 00:17:58.900
<00:17:55.300>will <00:17:55.533>be <00:17:55.766>able <00:17:56.000>to <00:17:56.233>check <00:17:56.466>the <00:17:56.700>secret

369
00:17:58.900 --> 00:18:01.900
<00:17:58.900>and <00:17:59.100>remember <00:17:59.300>that <00:17:59.500>you <00:17:59.700>should <00:17:59.900>not <00:18:00.100>talk <00:18:00.300>secrets

370
00:18:01.900 --> 00:18:02.500
<00:18:01.900>to <00:18:02.440>anyone.

371
00:18:03.200 --> 00:18:04.900
<00:18:03.200>So <00:18:03.480>what <00:18:03.760>we <00:18:04.040>need <00:18:04.320>to <00:18:04.600>do.

372
00:18:06.600 --> 00:18:11.000
<00:18:06.600>Let's <00:18:06.879>introduce <00:18:07.159>you <00:18:07.439>another <00:18:07.719>another <00:18:08.000>project.

373
00:18:09.400 --> 00:18:12.000
<00:18:09.400>Remember? <00:18:10.100>This <00:18:10.800>is

374
00:18:12.100 --> 00:18:15.300
<00:18:12.100>a <00:18:12.274>kubernetes <00:18:12.449>cluster. <00:18:12.625>We've <00:18:12.800>got <00:18:12.975>the <00:18:13.149>master <00:18:13.324>note <00:18:13.500>and

375
00:18:15.300 --> 00:18:15.600
and

376
00:18:16.900 --> 00:18:19.600
<00:18:16.900>Master <00:18:17.366>or <00:18:17.833>main <00:18:18.300>note

377
00:18:19.600 --> 00:18:22.500
<00:18:19.600>or <00:18:19.833>else <00:18:20.066>primary <00:18:20.300>notes. <00:18:20.533>Sorry <00:18:20.766>now <00:18:21.000>with

378
00:18:22.500 --> 00:18:25.600
<00:18:22.500>the <00:18:22.780>APA <00:18:23.060>API <00:18:23.340>apcd <00:18:23.620>schedulers <00:18:23.900>control

379
00:18:25.600 --> 00:18:28.500
<00:18:25.600>and <00:18:25.755>then <00:18:25.911>we've <00:18:26.066>got <00:18:26.222>all <00:18:26.377>the <00:18:26.533>worker <00:18:26.688>notes, <00:18:26.844>but <00:18:27.000>one

380
00:18:28.500 --> 00:18:31.700
<00:18:28.500>of <00:18:28.700>the <00:18:28.900>key <00:18:29.100>point <00:18:29.300>for <00:18:29.500>distal <00:18:29.700>Equity <00:18:29.900>is

381
00:18:31.700 --> 00:18:34.900
<00:18:31.700>a <00:18:31.933>slide <00:18:32.166>is <00:18:32.400>the <00:18:32.633>apcd <00:18:32.866>apcd. <00:18:33.100>Is

382
00:18:34.900 --> 00:18:37.200
<00:18:34.900>that <00:18:35.180>a <00:18:35.460>base <00:18:35.740>where <00:18:36.020>all <00:18:36.300>the

383
00:18:37.200 --> 00:18:40.100
<00:18:37.200>kubernetes <00:18:37.480>objects <00:18:37.760>are <00:18:38.040>stored. <00:18:38.320>It <00:18:38.600>means

384
00:18:40.100 --> 00:18:43.300
<00:18:40.100>that <00:18:40.300>any <00:18:40.500>kubernetes <00:18:40.699>secrets <00:18:40.899>is <00:18:41.100>a <00:18:41.300>store <00:18:41.500>in

385
00:18:43.300 --> 00:18:46.700
<00:18:43.300>80cc <00:18:43.500>that's <00:18:43.700>really <00:18:43.899>important <00:18:44.100>to <00:18:44.300>have <00:18:44.500>it <00:18:44.700>now

386
00:18:46.700 --> 00:18:47.500
clear.

387
00:18:48.600 --> 00:18:51.900
<00:18:48.600>Now <00:18:48.879>as <00:18:49.159>I <00:18:49.439>said <00:18:49.719>HTC <00:18:50.000>is

388
00:18:51.900 --> 00:18:54.500
<00:18:51.900>something <00:18:52.040>that's <00:18:52.180>running <00:18:52.320>usually <00:18:52.460>in <00:18:52.600>the <00:18:52.740>master <00:18:52.880>or <00:18:53.020>the <00:18:53.160>primary <00:18:53.300>node

389
00:18:54.500 --> 00:18:55.000
<00:18:54.500>by <00:18:54.950>default.

390
00:18:55.800 --> 00:18:58.300
<00:18:55.800>For <00:18:55.955>those <00:18:56.111>who <00:18:56.266>don't <00:18:56.422>know <00:18:56.577>exactly <00:18:56.733>what <00:18:56.888>is <00:18:57.044>atcd. <00:18:57.200>It's

391
00:18:58.300 --> 00:19:01.300
<00:18:58.300>a <00:18:58.475>distributed <00:18:58.649>key <00:18:58.825>value <00:18:59.000>databases <00:18:59.175>the <00:18:59.350>stores <00:18:59.524>the <00:18:59.700>state

392
00:19:01.300 --> 00:19:04.900
<00:19:01.300>of <00:19:01.440>the <00:19:01.580>cluster <00:19:01.720>and <00:19:01.860>when <00:19:02.000>we <00:19:02.139>do <00:19:02.280>for <00:19:02.419>example, <00:19:02.560>you've <00:19:02.700>got

393
00:19:04.900 --> 00:19:07.300
<00:19:04.900>to <00:19:05.133>get <00:19:05.366>parts. <00:19:05.600>Basically <00:19:05.833>these <00:19:06.066>parts <00:19:06.300>are

394
00:19:07.300 --> 00:19:10.100
<00:19:07.300>stored. <00:19:07.455>I <00:19:07.611>mean <00:19:07.766>that <00:19:07.922>the <00:19:08.077>information <00:19:08.233>are <00:19:08.388>starting <00:19:08.544>the <00:19:08.700>APC

395
00:19:10.100 --> 00:19:11.700
<00:19:10.100>so <00:19:10.333>your <00:19:10.566>query <00:19:10.800>it <00:19:11.033>easily <00:19:11.266>for <00:19:11.500>everything.

396
00:19:12.200 --> 00:19:12.400
and

397
00:19:13.700 --> 00:19:16.800
<00:19:13.700>few <00:19:13.875>in <00:19:14.050>the <00:19:14.225>secrets <00:19:14.400>are <00:19:14.575>stored <00:19:14.750>there <00:19:14.925>super <00:19:15.100>important

398
00:19:16.800 --> 00:19:19.200
<00:19:16.800>to <00:19:16.975>have <00:19:17.149>this <00:19:17.325>in <00:19:17.500>mind <00:19:17.675>for <00:19:17.850>what <00:19:18.024>we <00:19:18.200>are

399
00:19:19.200 --> 00:19:21.900
<00:19:19.200>going <00:19:19.400>to <00:19:19.600>see <00:19:19.800>in <00:19:20.000>the <00:19:20.200>following <00:19:20.400>sections. <00:19:20.600>So

400
00:19:23.300 --> 00:19:26.700
<00:19:23.300>Again, <00:19:23.580>how <00:19:23.860>we <00:19:24.139>can <00:19:24.419>fix <00:19:24.700>the

401
00:19:26.700 --> 00:19:29.600
<00:19:26.700>first <00:19:26.840>program <00:19:26.980>that <00:19:27.120>I <00:19:27.260>showed <00:19:27.400>you <00:19:27.540>today, <00:19:27.680>which <00:19:27.820>is <00:19:27.960>how <00:19:28.100>can

402
00:19:29.600 --> 00:19:32.500
<00:19:29.600>I <00:19:29.879>store <00:19:30.159>a <00:19:30.439>kubernetes <00:19:30.719>secret <00:19:31.000>object

403
00:19:32.500 --> 00:19:35.500
<00:19:32.500>inside <00:19:32.733>it <00:19:32.966>because <00:19:33.200>I <00:19:33.433>don't <00:19:33.666>implement <00:19:33.900>it

404
00:19:35.500 --> 00:19:35.700
all.

405
00:19:37.300 --> 00:19:39.100
<00:19:37.300>but <00:19:37.766>without <00:19:38.233>exposing <00:19:38.700>this

406
00:19:39.800 --> 00:19:42.400
<00:19:39.800>and <00:19:40.149>there <00:19:40.500>are <00:19:40.850>several <00:19:41.200>projects

407
00:19:42.400 --> 00:19:45.400
<00:19:42.400>for <00:19:42.575>me. <00:19:42.750>The <00:19:42.925>easiest <00:19:43.100>one <00:19:43.275>is <00:19:43.450>one <00:19:43.625>that <00:19:43.800>is

408
00:19:45.400 --> 00:19:49.200
<00:19:45.400>named <00:19:45.600>sealed <00:19:45.800>sequence. <00:19:46.000>Okay. <00:19:46.200>That's <00:19:46.400>that <00:19:46.600>green <00:19:46.800>nice

409
00:19:48.200 --> 00:19:50.400
<00:19:48.200>project <00:19:48.480>that <00:19:48.760>works <00:19:49.040>in <00:19:49.320>this <00:19:49.600>way.

410
00:19:52.300 --> 00:19:54.800
<00:19:52.300>We've <00:19:52.649>got <00:19:53.000>a <00:19:53.350>kubernetes <00:19:53.700>secret.

411
00:19:55.300 --> 00:19:58.800
<00:19:55.300>Okay, <00:19:55.533>then <00:19:55.766>we've <00:19:56.000>got <00:19:56.233>a <00:19:56.466>kubernetes <00:19:56.700>cluster.

412
00:19:59.700 --> 00:20:02.700
<00:19:59.700>This <00:19:59.933>kubernetes <00:20:00.166>cluster <00:20:00.400>has <00:20:00.633>a <00:20:00.866>pair <00:20:01.100>of

413
00:20:02.700 --> 00:20:05.100
<00:20:02.700>private <00:20:03.050>and <00:20:03.400>public <00:20:03.750>keys <00:20:04.100>and

414
00:20:05.100 --> 00:20:08.000
<00:20:05.100>this <00:20:05.255>private <00:20:05.411>and <00:20:05.566>public <00:20:05.722>key <00:20:05.877>is <00:20:06.033>inside <00:20:06.188>the <00:20:06.344>kubernetes <00:20:06.500>class.

415
00:20:08.800 --> 00:20:09.100
then

416
00:20:11.100 --> 00:20:14.800
<00:20:11.100>when <00:20:11.274>I <00:20:11.449>want <00:20:11.625>to <00:20:11.800>take <00:20:11.975>I <00:20:12.149>want <00:20:12.324>to <00:20:12.500>save.

417
00:20:15.800 --> 00:20:18.400
<00:20:15.800>Publish <00:20:16.266>ah <00:20:16.733>kubernet <00:20:17.200>secret.

418
00:20:18.400 --> 00:20:22.600
<00:20:18.400>What <00:20:18.527>I <00:20:18.654>need <00:20:18.781>to <00:20:18.909>do <00:20:19.036>is <00:20:19.163>the <00:20:19.290>use <00:20:19.418>the <00:20:19.545>cube <00:20:19.672>seal <00:20:19.800>CLI

419
00:20:21.600 --> 00:20:25.100
<00:20:21.600>tool <00:20:21.879>if <00:20:22.159>you <00:20:22.439>see <00:20:22.719>just <00:20:23.000>read

420
00:20:24.100 --> 00:20:28.400
<00:20:24.100>the <00:20:24.449>public <00:20:24.800>key <00:20:25.149>to <00:20:25.500>encrypt

421
00:20:29.600 --> 00:20:33.100
<00:20:29.600>Content <00:20:29.833>from <00:20:30.066>the <00:20:30.300>kubernetes <00:20:30.533>cluster <00:20:30.766>and <00:20:31.000>encrypts

422
00:20:32.100 --> 00:20:35.900
<00:20:32.100>the <00:20:32.379>secret <00:20:32.659>to <00:20:32.939>another <00:20:33.219>secret <00:20:33.500>which

423
00:20:35.900 --> 00:20:39.000
<00:20:35.900>is <00:20:36.133>name. <00:20:36.366>It <00:20:36.600>sealed <00:20:36.833>secret <00:20:37.066>you <00:20:37.300>see

424
00:20:38.100 --> 00:20:41.600
<00:20:38.100>now <00:20:38.227>in <00:20:38.354>the <00:20:38.481>demo <00:20:38.609>that <00:20:38.736>this <00:20:38.863>is <00:20:38.990>a <00:20:39.118>secret. <00:20:39.245>It's <00:20:39.372>safe <00:20:39.500>to

425
00:20:41.600 --> 00:20:44.500
<00:20:41.600>store <00:20:41.800>it <00:20:42.000>in <00:20:42.199>D. <00:20:42.399>So <00:20:42.600>we <00:20:42.800>storing <00:20:43.000>it

426
00:20:44.500 --> 00:20:47.300
<00:20:44.500>something <00:20:44.700>that <00:20:44.900>instead <00:20:45.100>of <00:20:45.300>containing <00:20:45.500>a <00:20:45.700>juvenile <00:20:45.900>cigarettes.

427
00:20:47.300 --> 00:20:48.400
<00:20:47.300>It <00:20:47.630>contains <00:20:47.960>another <00:20:48.290>thing.

428
00:20:49.500 --> 00:20:51.500
<00:20:49.500>Then <00:20:49.966>what <00:20:50.433>happened <00:20:50.900>when?

429
00:20:53.300 --> 00:20:56.400
<00:20:53.300>I <00:20:53.475>received <00:20:53.649>in <00:20:53.825>this <00:20:54.000>case <00:20:54.175>the <00:20:54.350>text <00:20:54.524>that <00:20:54.700>there

430
00:20:56.400 --> 00:20:59.400
<00:20:56.400>is <00:20:56.633>a <00:20:56.866>new <00:20:57.100>object <00:20:57.333>there. <00:20:57.566>It <00:20:57.800>just

431
00:20:59.400 --> 00:21:00.800
<00:20:59.400>captures <00:21:00.659>the

432
00:21:02.200 --> 00:21:03.100
humanities

433
00:21:04.300 --> 00:21:07.400
<00:21:04.300>or <00:21:04.440>the <00:21:04.580>new <00:21:04.720>kubernetes <00:21:04.860>secret <00:21:05.000>the <00:21:05.139>seal <00:21:05.280>secret, <00:21:05.419>which <00:21:05.560>is <00:21:05.700>encrypted.

434
00:21:08.100 --> 00:21:11.700
<00:21:08.100>But <00:21:08.274>at <00:21:08.449>this <00:21:08.625>point <00:21:08.800>are <00:21:08.975>the <00:21:09.149>city <00:21:09.324>just <00:21:09.500>applied

435
00:21:11.700 --> 00:21:14.800
<00:21:11.700>these <00:21:11.980>sealed <00:21:12.260>secret <00:21:12.540>when <00:21:12.820>applies <00:21:13.100>this

436
00:21:14.800 --> 00:21:15.400
<00:21:14.800>still <00:21:15.340>Secret.

437
00:21:16.800 --> 00:21:19.200
<00:21:16.800>the <00:21:17.000>Peace <00:21:17.200>of <00:21:17.399>Steel <00:21:17.600>secrets <00:21:17.800>that <00:21:18.000>are <00:21:18.200>installed

438
00:21:19.200 --> 00:21:19.800
inside

439
00:21:21.200 --> 00:21:24.800
<00:21:21.200>kubernetes <00:21:21.433>cluster. <00:21:21.666>Okay. <00:21:21.900>So <00:21:22.133>the <00:21:22.366>part <00:21:22.600>where

440
00:21:24.800 --> 00:21:28.200
<00:21:24.800>you've <00:21:25.000>got <00:21:25.200>the <00:21:25.399>private <00:21:25.600>key <00:21:25.800>to <00:21:26.000>the <00:21:26.200>crib

441
00:21:27.200 --> 00:21:30.300
<00:21:27.200>this <00:21:27.480>secret <00:21:27.760>is <00:21:28.040>run <00:21:28.320>so <00:21:28.600>that

442
00:21:30.300 --> 00:21:33.500
<00:21:30.300>the <00:21:30.455>crypto <00:21:30.611>part <00:21:30.766>happens <00:21:30.922>on <00:21:31.077>the <00:21:31.233>Cuban <00:21:31.388>either <00:21:31.544>side <00:21:31.700>inside

443
00:21:33.500 --> 00:21:36.400
<00:21:33.500>the <00:21:33.780>cluster <00:21:34.060>and <00:21:34.340>finally <00:21:34.620>the <00:21:34.900>Crips

444
00:21:36.400 --> 00:21:39.500
<00:21:36.400>digital <00:21:36.633>secrets <00:21:36.866>to <00:21:37.100>create <00:21:37.333>an <00:21:37.566>standard <00:21:37.800>secret.

445
00:21:39.500 --> 00:21:42.600
<00:21:39.500>So <00:21:39.780>basically <00:21:40.060>now <00:21:40.340>you <00:21:40.620>will <00:21:40.900>understand

446
00:21:42.600 --> 00:21:43.800
<00:21:42.600>with <00:21:42.870>the <00:21:43.139>demo <00:21:43.409>we've <00:21:43.679>got

447
00:21:44.600 --> 00:21:47.700
<00:21:44.600>One <00:21:44.800>piece <00:21:45.000>or <00:21:45.199>a <00:21:45.399>pair <00:21:45.600>of <00:21:45.800>public <00:21:46.000>keys

448
00:21:47.700 --> 00:21:51.000
<00:21:47.700>and <00:21:47.875>private <00:21:48.050>Keys <00:21:48.225>public <00:21:48.400>keys <00:21:48.575>are <00:21:48.750>on <00:21:48.925>the <00:21:49.100>laptop

449
00:21:50.800 --> 00:21:53.400
<00:21:50.800>private <00:21:51.033>keys <00:21:51.266>are <00:21:51.500>on <00:21:51.733>the <00:21:51.966>kubernetes <00:21:52.200>public

450
00:21:53.400 --> 00:21:54.800
<00:21:53.400>keys <00:21:53.715>are <00:21:54.030>used <00:21:54.345>to <00:21:54.659>encrypt.

451
00:21:55.400 --> 00:21:57.300
<00:21:55.400>Private <00:21:55.680>keys <00:21:55.960>are <00:21:56.240>used <00:21:56.520>to <00:21:56.800>decorate.

452
00:21:58.500 --> 00:22:01.000
<00:21:58.500>Let <00:21:58.640>me <00:21:58.780>show <00:21:58.920>you <00:21:59.060>in <00:21:59.200>a <00:21:59.340>moment <00:21:59.480>and <00:21:59.620>you <00:21:59.760>will <00:21:59.900>understand.

453
00:22:01.700 --> 00:22:04.300
<00:22:01.700>Let <00:22:01.933>me <00:22:02.166>do <00:22:02.400>for <00:22:02.633>example <00:22:02.866>keeper <00:22:03.100>I'll

454
00:22:04.300 --> 00:22:06.800
<00:22:04.300>get <00:22:04.580>parts <00:22:04.860>news <00:22:05.139>and <00:22:05.419>give <00:22:05.700>system.

455
00:22:07.700 --> 00:22:10.300
<00:22:07.700>You <00:22:07.933>see <00:22:08.166>here <00:22:08.400>in <00:22:08.633>this <00:22:08.866>Cube <00:22:09.100>system

456
00:22:10.300 --> 00:22:13.900
<00:22:10.300>name <00:22:10.455>a <00:22:10.611>space. <00:22:10.766>I've <00:22:10.922>got <00:22:11.077>the <00:22:11.233>sales <00:22:11.388>Secrets <00:22:11.544>controller <00:22:11.700>disease

457
00:22:13.900 --> 00:22:17.000
<00:22:13.900>a <00:22:14.133>pot <00:22:14.366>that <00:22:14.600>do <00:22:14.833>all <00:22:15.066>these <00:22:15.300>magic

458
00:22:16.300 --> 00:22:18.400
<00:22:16.300>that <00:22:16.580>I <00:22:16.860>just <00:22:17.139>explaining <00:22:17.419>to <00:22:17.700>you.

459
00:22:19.900 --> 00:22:23.100
<00:22:19.900>Decryption <00:22:20.250>the <00:22:20.600>decrypting <00:22:20.950>seal <00:22:21.300>secrets

460
00:22:22.100 --> 00:22:24.400
<00:22:22.100>into <00:22:22.379>a <00:22:22.659>Cuban <00:22:22.939>in <00:22:23.219>the <00:22:23.500>secret.

461
00:22:24.700 --> 00:22:27.500
<00:22:24.700>Then <00:22:24.933>as <00:22:25.166>I <00:22:25.400>said <00:22:25.633>before <00:22:25.866>we <00:22:26.100>need

462
00:22:27.500 --> 00:22:30.100
<00:22:27.500>to <00:22:27.655>download <00:22:27.811>it <00:22:27.966>the <00:22:28.122>public <00:22:28.277>key <00:22:28.433>to <00:22:28.588>be <00:22:28.744>able <00:22:28.900>to

463
00:22:30.100 --> 00:22:31.500
<00:22:30.100>encrypt <00:22:30.730>or <00:22:31.360>Secret.

464
00:22:32.300 --> 00:22:36.100
<00:22:32.300>We <00:22:32.500>can <00:22:32.700>do <00:22:32.899>this <00:22:33.100>in <00:22:33.300>the <00:22:33.500>next <00:22:33.700>way

465
00:22:35.100 --> 00:22:38.000
<00:22:35.100>you <00:22:35.566>do <00:22:36.033>keep <00:22:36.500>seal.

466
00:22:38.800 --> 00:22:41.300
<00:22:38.800>Minus <00:22:39.266>fetch <00:22:39.733>served. <00:22:40.200>So

467
00:22:41.300 --> 00:22:44.200
<00:22:41.300>I'm <00:22:41.427>just <00:22:41.554>fetching <00:22:41.681>the <00:22:41.809>certificate <00:22:41.936>here. <00:22:42.063>It <00:22:42.190>shows <00:22:42.318>you <00:22:42.445>the <00:22:42.572>certificate <00:22:42.700>and

468
00:22:44.200 --> 00:22:45.700
<00:22:44.200>installed <00:22:44.875>the <00:22:45.550>certificate.

469
00:22:46.600 --> 00:22:49.900
<00:22:46.600>Nothing. <00:22:46.774>I'm <00:22:46.949>just <00:22:47.125>take <00:22:47.300>it <00:22:47.475>a <00:22:47.649>public <00:22:47.824>key, <00:22:48.000>which

470
00:22:49.900 --> 00:22:50.500
<00:22:49.900>is <00:22:50.080>used <00:22:50.260>to <00:22:50.440>increase.

471
00:22:51.400 --> 00:22:54.200
<00:22:51.400>Now <00:22:51.680>it's <00:22:51.960>time <00:22:52.240>to <00:22:52.520>encrypt <00:22:52.800>something.

472
00:22:54.200 --> 00:22:57.300
<00:22:54.200>We <00:22:54.375>want <00:22:54.550>to <00:22:54.725>increase <00:22:54.900>what <00:22:55.075>we <00:22:55.250>can <00:22:55.425>encrypt <00:22:55.600>for

473
00:22:57.300 --> 00:23:01.900
<00:22:57.300>example, <00:22:57.533>you <00:22:57.766>can <00:22:58.000>increase <00:22:58.233>this <00:22:58.466>secret <00:22:58.700>this

474
00:23:00.900 --> 00:23:04.200
<00:23:00.900>secret <00:23:01.600>kubernet <00:23:02.300>secret

475
00:23:03.200 --> 00:23:06.400
<00:23:03.200>right <00:23:03.480>that <00:23:03.760>remember <00:23:04.040>that <00:23:04.320>it's <00:23:04.600>not

476
00:23:07.300 --> 00:23:10.300
<00:23:07.300>Encrypted <00:23:07.580>it. <00:23:07.860>Just <00:23:08.139>encoded <00:23:08.419>in <00:23:08.700>b64.

477
00:23:11.600 --> 00:23:14.900
<00:23:11.600>So <00:23:11.755>what <00:23:11.911>I'm <00:23:12.066>going <00:23:12.222>to <00:23:12.377>do <00:23:12.533>now, <00:23:12.688>it's <00:23:12.844>use <00:23:13.000>Q

478
00:23:14.900 --> 00:23:18.000
<00:23:14.900>seal <00:23:15.180>you <00:23:15.460>of <00:23:15.740>seal <00:23:16.020>minutes <00:23:16.300>minus

479
00:23:17.000 --> 00:23:18.300
format.

480
00:23:19.200 --> 00:23:22.200
<00:23:19.200>I <00:23:19.327>said <00:23:19.454>that <00:23:19.581>the <00:23:19.709>format <00:23:19.836>yaml <00:23:19.963>because <00:23:20.090>could <00:23:20.218>be <00:23:20.345>Json <00:23:20.472>or <00:23:20.600>not

481
00:23:22.200 --> 00:23:25.200
<00:23:22.200>and <00:23:22.340>I'm <00:23:22.480>just <00:23:22.620>saying <00:23:22.760>look <00:23:22.900>take <00:23:23.040>the <00:23:23.180>screen <00:23:23.320>a <00:23:23.460>secret <00:23:23.600>that

482
00:23:25.200 --> 00:23:28.300
<00:23:25.200>yaml <00:23:25.375>file <00:23:25.550>and <00:23:25.725>create <00:23:25.900>a <00:23:26.075>new <00:23:26.250>file <00:23:26.425>that <00:23:26.600>is

483
00:23:28.300 --> 00:23:31.400
<00:23:28.300>name <00:23:28.533>greeting <00:23:28.766>secrets <00:23:29.000>you <00:23:29.233>secret <00:23:29.466>the <00:23:29.700>email

484
00:23:31.400 --> 00:23:34.500
<00:23:31.400>which <00:23:31.575>is <00:23:31.750>going <00:23:31.925>to <00:23:32.100>run <00:23:32.275>in <00:23:32.450>this <00:23:32.625>name <00:23:32.800>space.

485
00:23:34.500 --> 00:23:35.600
<00:23:34.500>So <00:23:34.747>when <00:23:34.995>I <00:23:35.242>run <00:23:35.490>this

486
00:23:36.600 --> 00:23:39.400
<00:23:36.600>Not <00:23:36.833>that <00:23:37.066>point. <00:23:37.300>I'm <00:23:37.533>just <00:23:37.766>encrypted <00:23:38.000>this

487
00:23:39.400 --> 00:23:42.500
<00:23:39.400>secret <00:23:39.575>that <00:23:39.750>yaml <00:23:39.925>file <00:23:40.100>which <00:23:40.275>is <00:23:40.450>this <00:23:40.625>one <00:23:40.800>reading.

488
00:23:43.700 --> 00:23:46.300
<00:23:43.700>Secret <00:23:43.980>steel <00:23:44.260>secrets <00:23:44.540>you <00:23:44.820>see <00:23:45.100>now?

489
00:23:46.900 --> 00:23:49.200
<00:23:46.900>This <00:23:47.100>is <00:23:47.300>exactly <00:23:47.500>the <00:23:47.700>same <00:23:47.900>secret <00:23:48.100>as <00:23:48.300>before

490
00:23:49.200 --> 00:23:52.800
<00:23:49.200>but <00:23:49.340>it's <00:23:49.480>encrypted. <00:23:49.620>You <00:23:49.760>see <00:23:49.900>that <00:23:50.040>the <00:23:50.180>written <00:23:50.320>message <00:23:50.460>now <00:23:50.600>contains

491
00:23:52.800 --> 00:23:55.500
<00:23:52.800>a <00:23:53.033>bunch <00:23:53.266>of <00:23:53.500>bikes <00:23:53.733>here <00:23:53.966>and <00:23:54.200>what

492
00:23:55.500 --> 00:23:58.800
<00:23:55.500>yeah <00:23:55.675>and <00:23:55.850>a <00:23:56.025>lot <00:23:56.200>of <00:23:56.375>different <00:23:56.550>things <00:23:56.725>but <00:23:56.900>this

493
00:23:58.800 --> 00:24:01.300
<00:23:58.800>is <00:23:59.080>the <00:23:59.360>file <00:23:59.639>that <00:23:59.919>you're <00:24:00.200>going

494
00:24:01.300 --> 00:24:04.500
<00:24:01.300>to <00:24:01.580>store <00:24:01.860>in <00:24:02.139>git <00:24:02.419>you're <00:24:02.700>not

495
00:24:04.500 --> 00:24:07.500
<00:24:04.500>going <00:24:04.675>to <00:24:04.850>store <00:24:05.025>the <00:24:05.200>secretary. <00:24:05.375>In <00:24:05.550>fact <00:24:05.725>at <00:24:05.900>this

496
00:24:07.500 --> 00:24:10.800
<00:24:07.500>point. <00:24:07.733>You <00:24:07.966>can <00:24:08.200>remove <00:24:08.433>secretary <00:24:08.666>because <00:24:08.900>you

497
00:24:10.800 --> 00:24:14.400
<00:24:10.800>do <00:24:11.000>not <00:24:11.200>you <00:24:11.399>are <00:24:11.600>not <00:24:11.800>interested <00:24:12.000>anymore. <00:24:12.200>What

498
00:24:13.400 --> 00:24:16.600
<00:24:13.400>you <00:24:13.600>really <00:24:13.800>are <00:24:14.000>interested <00:24:14.200>is <00:24:14.400>in <00:24:14.600>these <00:24:14.800>file,

499
00:24:16.600 --> 00:24:18.700
<00:24:16.600>which <00:24:17.066>is <00:24:17.533>incredited <00:24:18.000>now,

500
00:24:19.900 --> 00:24:22.100
<00:24:19.900>I <00:24:20.100>can <00:24:20.300>look <00:24:20.500>if <00:24:20.700>Carol <00:24:20.900>apply <00:24:21.100>new <00:24:21.300>Z

501
00:24:22.100 --> 00:24:25.700
<00:24:22.100>of <00:24:22.333>this <00:24:22.566>file <00:24:22.800>in <00:24:23.033>my <00:24:23.266>kubernetes <00:24:23.500>cluster

502
00:24:25.700 --> 00:24:27.500
<00:24:25.700>now, <00:24:25.980>I'm <00:24:26.260>simulating <00:24:26.540>that <00:24:26.820>I'm <00:24:27.100>RV.

503
00:24:28.400 --> 00:24:29.200
<00:24:28.400>I <00:24:28.760>apply <00:24:29.120>it.

504
00:24:30.400 --> 00:24:31.700
<00:24:30.400>And <00:24:30.985>it's <00:24:31.570>clearly.

505
00:24:32.200 --> 00:24:34.200
<00:24:32.200>What's <00:24:32.433>happening <00:24:32.666>if <00:24:32.900>you <00:24:33.133>call <00:24:33.366>it <00:24:33.600>secrets?

506
00:24:36.600 --> 00:24:38.800
<00:24:36.600>You <00:24:36.800>see <00:24:37.000>that <00:24:37.199>the <00:24:37.399>greeting <00:24:37.600>secret <00:24:37.800>is <00:24:38.000>here.

507
00:24:39.700 --> 00:24:42.500
<00:24:39.700>That <00:24:39.875>you <00:24:40.050>know <00:24:40.225>seven <00:24:40.400>seconds <00:24:40.575>ago. <00:24:40.750>I <00:24:40.925>created <00:24:41.100>the

508
00:24:42.500 --> 00:24:43.000
<00:24:42.500>Grid <00:24:42.725>in <00:24:42.950>secret.

509
00:24:43.700 --> 00:24:44.500
basically

510
00:24:45.700 --> 00:24:49.300
<00:24:45.700>You <00:24:45.980>seal <00:24:46.260>has <00:24:46.540>just <00:24:46.820>decrypted <00:24:47.100>that

511
00:24:48.300 --> 00:24:51.700
<00:24:48.300>object <00:24:48.766>and <00:24:49.233>created <00:24:49.700>a

512
00:24:51.700 --> 00:24:54.400
<00:24:51.700>real <00:24:51.980>Humanity, <00:24:52.260>which <00:24:52.540>is <00:24:52.820>very <00:24:53.100>agency.

513
00:24:55.100 --> 00:24:56.900
<00:24:55.100>Of <00:24:55.300>course, <00:24:55.500>I <00:24:55.699>can <00:24:55.899>do <00:24:56.100>keep <00:24:56.300>cut <00:24:56.500>out.

514
00:24:57.500 --> 00:24:58.500
<00:24:57.500>Yet <00:24:58.400>Secret.

515
00:24:59.500 --> 00:25:00.600
reading

516
00:25:01.800 --> 00:25:03.200
<00:25:01.800>secret, <00:25:02.430>you <00:25:03.060>know.

517
00:25:05.300 --> 00:25:08.700
<00:25:05.300>And <00:25:05.475>you <00:25:05.649>can <00:25:05.825>see <00:25:06.000>that <00:25:06.175>the <00:25:06.350>secret <00:25:06.524>is <00:25:06.700>the

518
00:25:08.700 --> 00:25:10.900
<00:25:08.700>original <00:25:08.980>one <00:25:09.260>having <00:25:09.540>the <00:25:09.820>greeting <00:25:10.100>message.

519
00:25:12.300 --> 00:25:15.300
<00:25:12.300>And <00:25:12.500>encrypt <00:25:12.700>unencrypted <00:25:12.899>so <00:25:13.100>with <00:25:13.300>the <00:25:13.500>original <00:25:13.700>value.

520
00:25:16.500 --> 00:25:17.400
<00:25:16.500>So <00:25:17.310>great.

521
00:25:18.300 --> 00:25:20.400
<00:25:18.300>now <00:25:18.580>we're <00:25:18.860>gonna <00:25:19.139>start <00:25:19.419>to <00:25:19.700>give

522
00:25:21.800 --> 00:25:24.300
<00:25:21.800>secrets <00:25:22.033>that <00:25:22.266>are <00:25:22.500>encrypted <00:25:22.733>and <00:25:22.966>when <00:25:23.200>I

523
00:25:24.300 --> 00:25:27.100
<00:25:24.300>apply <00:25:24.766>these <00:25:25.233>encrypted <00:25:25.700>files

524
00:25:27.900 --> 00:25:31.100
<00:25:27.900>automatically <00:25:28.600>kubernetes <00:25:29.300>creates

525
00:25:30.100 --> 00:25:33.400
<00:25:30.100>the <00:25:30.449>kubernetes <00:25:30.800>secret <00:25:31.149>and <00:25:31.500>encrypted

526
00:25:33.400 --> 00:25:36.000
<00:25:33.400>and <00:25:33.633>put <00:25:33.866>it <00:25:34.100>inside <00:25:34.333>the <00:25:34.566>kubernetes <00:25:34.800>cost.

527
00:25:36.900 --> 00:25:38.600
<00:25:36.900>So <00:25:37.180>some <00:25:37.460>of <00:25:37.740>you <00:25:38.020>might <00:25:38.300>say

528
00:25:39.500 --> 00:25:41.000
<00:25:39.500>Well, <00:25:40.175>that's <00:25:40.850>great.

529
00:25:41.800 --> 00:25:42.800
<00:25:41.800>We've <00:25:42.100>done <00:25:42.399>it <00:25:42.700>right.

530
00:25:43.700 --> 00:25:43.900
but

531
00:25:45.800 --> 00:25:46.400
<00:25:45.800>can <00:25:45.935>you <00:25:46.070>see <00:25:46.205>something <00:25:46.340>here?

532
00:25:47.500 --> 00:25:50.500
<00:25:47.500>You <00:25:47.675>see <00:25:47.850>that <00:25:48.025>the <00:25:48.200>message <00:25:48.375>here <00:25:48.550>inside <00:25:48.725>the <00:25:48.900>cluster

533
00:25:50.500 --> 00:25:51.500
<00:25:50.500>is <00:25:50.950>an <00:25:51.400>encrypted.

534
00:25:53.200 --> 00:25:53.400
and

535
00:25:55.300 --> 00:25:59.300
<00:25:55.300>this <00:25:55.475>means <00:25:55.649>several <00:25:55.825>things <00:25:56.000>the <00:25:56.175>first <00:25:56.350>one <00:25:56.524>anyone <00:25:56.700>with

536
00:25:59.300 --> 00:26:01.200
<00:25:59.300>access <00:25:59.533>to <00:25:59.766>the <00:26:00.000>kubernetes <00:26:00.233>cluster <00:26:00.466>can <00:26:00.700>do.

537
00:26:02.200 --> 00:26:02.800
<00:26:02.200>this <00:26:02.740>comma

538
00:26:04.300 --> 00:26:05.300
<00:26:04.300>and <00:26:04.600>get <00:26:04.899>the <00:26:05.200>secret.

539
00:26:06.300 --> 00:26:09.500
<00:26:06.300>Of <00:26:06.455>course, <00:26:06.611>you <00:26:06.766>might <00:26:06.922>say. <00:26:07.077>Oh <00:26:07.233>no. <00:26:07.388>No, <00:26:07.544>not <00:26:07.700>everyone

540
00:26:09.500 --> 00:26:11.800
<00:26:09.500>has <00:26:09.675>access <00:26:09.850>to <00:26:10.025>the <00:26:10.200>community <00:26:10.375>cluster. <00:26:10.550>Yes, <00:26:10.725>I <00:26:10.900>know.

541
00:26:12.800 --> 00:26:15.600
<00:26:12.800>And <00:26:13.033>what's <00:26:13.266>happened <00:26:13.500>what's <00:26:13.733>happened <00:26:13.966>to <00:26:14.200>80

542
00:26:15.600 --> 00:26:19.600
<00:26:15.600>CD <00:26:15.949>remember <00:26:16.300>that <00:26:16.649>most <00:26:17.000>of

543
00:26:19.600 --> 00:26:22.700
<00:26:19.600>the <00:26:19.949>information <00:26:20.300>and <00:26:20.649>the <00:26:21.000>secrets

544
00:26:22.700 --> 00:26:24.500
<00:26:22.700>as <00:26:22.980>well <00:26:23.260>are <00:26:23.540>store <00:26:23.820>in <00:26:24.100>apcd?

545
00:26:25.200 --> 00:26:29.200
<00:26:25.200>so <00:26:25.400>if <00:26:25.600>anyone <00:26:25.800>has <00:26:26.000>access <00:26:26.200>to <00:26:26.400>APC <00:26:26.600>they're

546
00:26:28.200 --> 00:26:29.800
<00:26:28.200>going <00:26:28.900>to <00:26:29.600>get

547
00:26:30.900 --> 00:26:31.300
this

548
00:26:32.400 --> 00:26:35.200
<00:26:32.400>so <00:26:32.575>they <00:26:32.750>are <00:26:32.925>going <00:26:33.100>to <00:26:33.275>get <00:26:33.450>the <00:26:33.625>secret <00:26:33.800>unencrypted.

549
00:26:36.100 --> 00:26:37.600
<00:26:36.100>Of <00:26:36.370>course, <00:26:36.639>you <00:26:36.909>might <00:26:37.179>say <00:26:37.449>oh.

550
00:26:38.100 --> 00:26:38.500
<00:26:38.100>No <00:26:38.280>worries, <00:26:38.460>Alex.

551
00:26:38.900 --> 00:26:40.300
<00:26:38.900>We <00:26:39.530>are <00:26:40.159>no.

552
00:26:41.300 --> 00:26:43.400
<00:26:41.300>protecting <00:26:41.766>a <00:26:42.233>lot <00:26:42.700>80cd

553
00:26:44.300 --> 00:26:47.900
<00:26:44.300>That's <00:26:44.455>fine. <00:26:44.611>What's <00:26:44.766>happened <00:26:44.922>with <00:26:45.077>the <00:26:45.233>locks <00:26:45.388>of <00:26:45.544>atcb <00:26:45.700>or

554
00:26:47.900 --> 00:26:51.100
<00:26:47.900>the <00:26:48.180>backups <00:26:48.460>of <00:26:48.740>atcd <00:26:49.020>all <00:26:49.300>these?

555
00:26:51.800 --> 00:26:54.200
<00:26:51.800>information <00:26:52.000>all <00:26:52.200>the <00:26:52.399>log <00:26:52.600>files <00:26:52.800>all <00:26:53.000>the <00:26:53.200>backup

556
00:26:54.400 --> 00:26:57.000
<00:26:54.400>s <00:26:54.750>of <00:26:55.100>itcv <00:26:55.450>also <00:26:55.800>contains

557
00:26:57.700 --> 00:26:59.400
<00:26:57.700>the <00:26:58.166>secrets <00:26:58.633>and <00:26:59.100>encrypted

558
00:27:00.500 --> 00:27:03.400
<00:27:00.500>So <00:27:00.733>that's <00:27:00.966>true <00:27:01.200>that <00:27:01.433>you <00:27:01.666>can <00:27:01.900>protect

559
00:27:03.400 --> 00:27:06.300
<00:27:03.400>80cd. <00:27:03.600>But <00:27:03.800>you <00:27:04.000>remember <00:27:04.200>what <00:27:04.400>I <00:27:04.600>mentioned <00:27:04.800>before

560
00:27:06.300 --> 00:27:09.300
<00:27:06.300>of <00:27:06.475>the <00:27:06.649>layers <00:27:06.825>like <00:27:07.000>your <00:27:07.175>onions, <00:27:07.350>right? <00:27:07.524>So <00:27:07.700>you

561
00:27:09.300 --> 00:27:12.900
<00:27:09.300>can <00:27:09.455>protect <00:27:09.611>the <00:27:09.766>tcd <00:27:09.922>but <00:27:10.077>if <00:27:10.233>you <00:27:10.388>lose <00:27:10.544>the <00:27:10.700>control

562
00:27:12.900 --> 00:27:15.800
<00:27:12.900>of <00:27:13.133>Etc <00:27:13.366>or <00:27:13.600>you <00:27:13.833>get <00:27:14.066>loose <00:27:14.300>of

563
00:27:15.800 --> 00:27:17.200
<00:27:15.800>the <00:27:16.115>backups <00:27:16.430>or <00:27:16.745>the <00:27:17.060>locks.

564
00:27:17.800 --> 00:27:20.700
<00:27:17.800>okay, <00:27:18.000>you <00:27:18.200>can <00:27:18.399>get <00:27:18.600>an <00:27:18.800>attacker <00:27:19.000>might <00:27:19.200>have

565
00:27:20.700 --> 00:27:21.200
the

566
00:27:22.500 --> 00:27:22.900
information

567
00:27:24.300 --> 00:27:25.400
<00:27:24.300>of <00:27:24.547>course, <00:27:24.795>you <00:27:25.042>might <00:27:25.290>say

568
00:27:26.700 --> 00:27:29.500
<00:27:26.700>Okay, <00:27:26.875>how <00:27:27.050>we <00:27:27.225>can <00:27:27.400>fix <00:27:27.575>this <00:27:27.750>because <00:27:27.925>at <00:27:28.100>the

569
00:27:29.500 --> 00:27:31.800
<00:27:29.500>end <00:27:29.733>I'm <00:27:29.966>just <00:27:30.200>applying <00:27:30.433>a <00:27:30.666>kubernetes <00:27:30.900>secret.

570
00:27:32.500 --> 00:27:36.100
<00:27:32.500>That <00:27:32.675>was <00:27:32.850>encrypted <00:27:33.025>and <00:27:33.200>now <00:27:33.375>it's <00:27:33.550>unencrypted <00:27:33.725>inside <00:27:33.900>quranitas.

571
00:27:38.200 --> 00:27:41.500
<00:27:38.200>Kubernetes <00:27:38.355>notice <00:27:38.511>that <00:27:38.666>and <00:27:38.822>create <00:27:38.977>one <00:27:39.133>thing <00:27:39.288>that <00:27:39.444>is <00:27:39.600>named

572
00:27:41.500 --> 00:27:44.700
<00:27:41.500>encryption <00:27:41.780>Secrets <00:27:42.060>at <00:27:42.340>rest <00:27:42.620>basically <00:27:42.900>is

573
00:27:44.700 --> 00:27:48.300
<00:27:44.700>encrypting <00:27:45.166>this <00:27:45.633>kubernetes <00:27:46.100>secrets.

574
00:27:49.100 --> 00:27:50.500
<00:27:49.100>in <00:27:50.360>apcd

575
00:27:51.400 --> 00:27:52.000
<00:27:51.400>so <00:27:51.940>now

576
00:27:53.400 --> 00:27:56.500
<00:27:53.400>when <00:27:53.633>we <00:27:53.866>store <00:27:54.100>something <00:27:54.333>in <00:27:54.566>inside <00:27:54.800>a

577
00:27:56.500 --> 00:27:58.500
<00:27:56.500>tcd <00:27:56.850>it <00:27:57.200>can <00:27:57.550>be <00:27:57.900>encrypted.

578
00:28:00.200 --> 00:28:03.400
<00:28:00.200>So <00:28:00.433>basically <00:28:00.666>it <00:28:00.900>does <00:28:01.133>something <00:28:01.366>like <00:28:01.600>this.

579
00:28:03.400 --> 00:28:05.000
<00:28:03.400>I've <00:28:03.866>got <00:28:04.333>the <00:28:04.800>masternode.

580
00:28:05.700 --> 00:28:08.500
<00:28:05.700>Or <00:28:05.875>the <00:28:06.050>primary <00:28:06.225>note <00:28:06.400>of <00:28:06.575>kubernetes <00:28:06.750>remembered <00:28:06.925>that <00:28:07.100>we've

581
00:28:08.500 --> 00:28:11.200
<00:28:08.500>got <00:28:08.640>something <00:28:08.780>that <00:28:08.920>is <00:28:09.060>named <00:28:09.200>apcd. <00:28:09.340>So <00:28:09.480>when <00:28:09.620>I <00:28:09.760>do <00:28:09.900>a

582
00:28:11.200 --> 00:28:12.700
<00:28:11.200>quick <00:28:11.470>car <00:28:11.740>apply <00:28:12.010>of <00:28:12.280>a <00:28:12.550>secret

583
00:28:14.200 --> 00:28:17.600
<00:28:14.200>or <00:28:14.327>in <00:28:14.454>case <00:28:14.581>of <00:28:14.709>a <00:28:14.836>steel <00:28:14.963>secret <00:28:15.090>when <00:28:15.218>I <00:28:15.345>apply <00:28:15.472>the <00:28:15.600>early

584
00:28:17.600 --> 00:28:20.700
<00:28:17.600>encrypted <00:28:17.949>so <00:28:18.300>secret <00:28:18.649>then <00:28:19.000>I've

585
00:28:20.700 --> 00:28:22.400
<00:28:20.700>got <00:28:21.050>an <00:28:21.400>encryption <00:28:21.750>configuration <00:28:22.100>file.

586
00:28:23.300 --> 00:28:24.900
<00:28:23.300>that <00:28:24.700>encrypts

587
00:28:26.500 --> 00:28:29.700
<00:28:26.500>the <00:28:26.675>secret <00:28:26.850>and <00:28:27.025>store <00:28:27.200>to <00:28:27.375>80 <00:28:27.550>CD. <00:28:27.725>So <00:28:27.900>when

588
00:28:29.700 --> 00:28:32.100
<00:28:29.700>I <00:28:29.855>joke <00:28:30.011>if <00:28:30.166>Carl <00:28:30.322>apply <00:28:30.477>of <00:28:30.633>a <00:28:30.788>secret <00:28:30.944>there <00:28:31.100>is

589
00:28:32.100 --> 00:28:36.000
<00:28:32.100>a <00:28:32.240>process <00:28:32.379>that <00:28:32.520>encrypts <00:28:32.659>this <00:28:32.800>secret <00:28:32.939>and <00:28:33.080>store <00:28:33.219>it <00:28:33.360>inside <00:28:33.500>apcd

590
00:28:35.000 --> 00:28:36.600
encrypted.

591
00:28:37.200 --> 00:28:41.400
<00:28:37.200>And <00:28:37.433>when <00:28:37.666>someone <00:28:37.900>needs <00:28:38.133>to <00:28:38.366>inject <00:28:38.600>these

592
00:28:40.400 --> 00:28:44.600
<00:28:40.400>secret <00:28:40.866>from <00:28:41.333>a <00:28:41.800>PCV

593
00:28:43.600 --> 00:28:46.600
<00:28:43.600>or <00:28:43.879>from <00:28:44.159>kubernetes <00:28:44.439>into <00:28:44.719>the <00:28:45.000>pot

594
00:28:46.600 --> 00:28:49.300
<00:28:46.600>then <00:28:46.800>it <00:28:47.000>does <00:28:47.199>the <00:28:47.399>reverse <00:28:47.600>process. <00:28:47.800>It <00:28:48.000>just

595
00:28:49.300 --> 00:28:52.800
<00:28:49.300>reach <00:28:49.500>from <00:28:49.700>atcd <00:28:49.899>the <00:28:50.100>crypts <00:28:50.300>and <00:28:50.500>injects <00:28:50.700>the

596
00:28:52.800 --> 00:28:53.900
<00:28:52.800>information <00:28:53.130>into <00:28:53.460>that <00:28:53.790>point.

597
00:28:58.200 --> 00:28:59.400
<00:28:58.200>Great, <00:28:58.560>that's <00:28:58.920>exactly <00:28:59.280>what?

598
00:29:01.500 --> 00:29:03.400
<00:29:01.500>I <00:29:01.780>mean, <00:29:02.060>well, <00:29:02.340>yes <00:29:02.620>and <00:29:02.900>no.

599
00:29:04.500 --> 00:29:07.400
<00:29:04.500>because <00:29:04.700>one <00:29:04.900>of <00:29:05.100>the <00:29:05.300>funny <00:29:05.500>things <00:29:05.700>about <00:29:05.900>this

600
00:29:08.300 --> 00:29:11.900
<00:29:08.300>way <00:29:08.580>of <00:29:08.860>working <00:29:09.139>with <00:29:09.419>with <00:29:09.700>kubernetes

601
00:29:11.900 --> 00:29:12.300
<00:29:11.900>is <00:29:12.260>that

602
00:29:13.900 --> 00:29:16.400
<00:29:13.900>In <00:29:14.133>the <00:29:14.366>masternodes, <00:29:14.600>we <00:29:14.833>are <00:29:15.066>storing <00:29:15.300>the

603
00:29:16.400 --> 00:29:19.500
<00:29:16.400>atcv <00:29:16.866>so <00:29:17.333>we <00:29:17.800>are

604
00:29:19.500 --> 00:29:23.200
<00:29:19.500>putting <00:29:19.780>here <00:29:20.060>the <00:29:20.340>secrets <00:29:20.620>encrypted, <00:29:20.900>but

605
00:29:22.200 --> 00:29:25.600
<00:29:22.200>do <00:29:22.400>you <00:29:22.600>know <00:29:22.800>what <00:29:23.000>you <00:29:23.200>know, <00:29:23.400>where <00:29:23.600>are

606
00:29:25.600 --> 00:29:28.900
<00:29:25.600>the <00:29:25.879>private <00:29:26.159>keys <00:29:26.439>to <00:29:26.719>decree <00:29:27.000>this

607
00:29:28.900 --> 00:29:29.100
information?

608
00:29:30.500 --> 00:29:30.800
<00:29:30.500>in <00:29:30.770>the

609
00:29:31.500 --> 00:29:32.100
<00:29:31.500>same <00:29:31.770>matter <00:29:32.040>note

610
00:29:33.200 --> 00:29:33.800
<00:29:33.200>this <00:29:33.470>means <00:29:33.740>that.

611
00:29:34.200 --> 00:29:35.300
<00:29:34.200>any <00:29:35.190>attacker

612
00:29:35.600 --> 00:29:38.900
<00:29:35.600>might <00:29:35.949>just <00:29:36.300>attack <00:29:36.649>masternode <00:29:37.000>get

613
00:29:38.900 --> 00:29:41.500
<00:29:38.900>apcd <00:29:39.600>lots <00:29:40.300>get

614
00:29:41.500 --> 00:29:44.300
<00:29:41.500>apcd <00:29:41.780>access <00:29:42.060>since <00:29:42.340>he <00:29:42.620>has <00:29:42.900>access

615
00:29:44.300 --> 00:29:47.900
<00:29:44.300>to <00:29:44.427>the <00:29:44.554>muscle <00:29:44.681>note. <00:29:44.809>He <00:29:44.936>can <00:29:45.063>get <00:29:45.190>the <00:29:45.318>private <00:29:45.445>keys. <00:29:45.572>And <00:29:45.700>then

616
00:29:47.900 --> 00:29:50.800
<00:29:47.900>we've <00:29:48.180>got <00:29:48.460>the <00:29:48.740>two <00:29:49.020>pieces <00:29:49.300>information

617
00:29:50.800 --> 00:29:53.900
<00:29:50.800>and <00:29:51.000>the <00:29:51.200>keys <00:29:51.399>to <00:29:51.600>the <00:29:51.800>crib <00:29:52.000>information. <00:29:52.200>So

618
00:29:54.700 --> 00:29:57.600
<00:29:54.700>Does <00:29:54.980>it <00:29:55.260>work? <00:29:55.540>Yes, <00:29:55.820>it's <00:29:56.100>better

619
00:29:57.600 --> 00:30:00.300
<00:29:57.600>that <00:29:57.879>an <00:29:58.159>uncivity <00:29:58.439>CD. <00:29:58.719>Yes. <00:29:59.000>It's

620
00:30:00.300 --> 00:30:03.200
<00:30:00.300>better, <00:30:00.580>but <00:30:00.860>it's <00:30:01.139>not <00:30:01.419>bullet <00:30:01.700>Pro.

621
00:30:04.200 --> 00:30:07.800
<00:30:04.200>Even <00:30:04.375>a <00:30:04.550>Target <00:30:04.725>acts <00:30:04.900>to <00:30:05.075>masternode <00:30:05.250>can <00:30:05.425>get <00:30:05.600>private

622
00:30:07.800 --> 00:30:10.100
<00:30:07.800>keys <00:30:08.033>can <00:30:08.266>get <00:30:08.500>HTC <00:30:08.733>and <00:30:08.966>decrypt <00:30:09.200>information.

623
00:30:11.200 --> 00:30:13.100
<00:30:11.200>now <00:30:11.666>in <00:30:12.133>this <00:30:12.600>then

624
00:30:15.700 --> 00:30:18.500
<00:30:15.700>giveness <00:30:15.900>decide <00:30:16.100>to <00:30:16.300>create <00:30:16.500>one <00:30:16.700>thing <00:30:16.900>that's <00:30:17.100>named

625
00:30:18.500 --> 00:30:22.200
<00:30:18.500>key <00:30:18.675>management <00:30:18.850>system <00:30:19.025>plugin. <00:30:19.200>So <00:30:19.375>it's <00:30:19.550>a <00:30:19.725>way <00:30:19.900>to

626
00:30:24.900 --> 00:30:27.500
<00:30:24.900>make <00:30:25.366>this <00:30:25.833>encryption <00:30:26.300>process

627
00:30:27.500 --> 00:30:31.200
<00:30:27.500>happens <00:30:27.850>outside <00:30:28.200>of <00:30:28.550>kubernetes <00:30:28.900>cluster.

628
00:30:30.200 --> 00:30:34.200
<00:30:30.200>So <00:30:30.480>basically <00:30:30.760>it <00:30:31.040>works <00:30:31.320>in <00:30:31.600>this

629
00:30:33.200 --> 00:30:36.300
<00:30:33.200>way. <00:30:33.400>We've <00:30:33.600>got <00:30:33.800>the <00:30:34.000>secret <00:30:34.200>then <00:30:34.400>the <00:30:34.600>secret

630
00:30:36.300 --> 00:30:38.500
<00:30:36.300>goes <00:30:36.475>to <00:30:36.649>the <00:30:36.825>KMS <00:30:37.000>plugin <00:30:37.175>and <00:30:37.350>the <00:30:37.524>KMS <00:30:37.700>plugin.

631
00:30:39.200 --> 00:30:42.600
<00:30:39.200>Delegate <00:30:39.433>to <00:30:39.666>keep <00:30:39.900>management <00:30:40.133>system <00:30:40.366>or <00:30:40.600>a

632
00:30:42.600 --> 00:30:43.400
<00:30:42.600>Secret <00:30:43.320>store.

633
00:30:44.900 --> 00:30:47.900
<00:30:44.900>The <00:30:45.250>encryption <00:30:45.600>of <00:30:45.950>the <00:30:46.300>secret.

634
00:30:47.900 --> 00:30:50.500
<00:30:47.900>So <00:30:48.133>this <00:30:48.366>this <00:30:48.600>case <00:30:48.833>is <00:30:49.066>hashicor <00:30:49.300>world.

635
00:30:50.500 --> 00:30:53.100
<00:30:50.500>Can <00:30:50.655>you <00:30:50.811>use <00:30:50.966>any <00:30:51.122>other <00:30:51.277>but <00:30:51.433>in <00:30:51.588>this <00:30:51.744>example, <00:30:51.900>I

636
00:30:53.100 --> 00:30:56.800
<00:30:53.100>put <00:30:53.216>all <00:30:53.333>in <00:30:53.449>part <00:30:53.566>in <00:30:53.683>the <00:30:53.800>demo, <00:30:53.916>we're <00:30:54.033>going <00:30:54.149>to <00:30:54.266>see <00:30:54.383>hashical <00:30:54.500>ball

637
00:30:56.800 --> 00:30:59.800
<00:30:56.800>as <00:30:57.000>well <00:30:57.200>where <00:30:57.399>we <00:30:57.600>are <00:30:57.800>just <00:30:58.000>sanding <00:30:58.200>the

638
00:30:59.800 --> 00:31:02.500
<00:30:59.800>secret <00:31:00.080>here. <00:31:00.360>This <00:31:00.639>part <00:31:00.919>is <00:31:01.200>outside

639
00:31:02.500 --> 00:31:05.700
<00:31:02.500>of <00:31:02.655>Cuban <00:31:02.811>with <00:31:02.966>this <00:31:03.122>cluster <00:31:03.277>is <00:31:03.433>encrypting <00:31:03.588>data, <00:31:03.744>it <00:31:03.900>gets

640
00:31:05.700 --> 00:31:08.900
<00:31:05.700>back <00:31:05.900>then <00:31:06.100>encrypted <00:31:06.300>data <00:31:06.500>and <00:31:06.700>Story <00:31:06.900>3 <00:31:07.100>then

641
00:31:10.800 --> 00:31:13.300
<00:31:10.800>When <00:31:10.975>you <00:31:11.149>want <00:31:11.325>to <00:31:11.500>inject <00:31:11.675>the <00:31:11.850>secret, <00:31:12.024>it <00:31:12.200>happens

642
00:31:13.300 --> 00:31:17.900
<00:31:13.300>the <00:31:13.440>reverse <00:31:13.580>order <00:31:13.720>at <00:31:13.860>CD <00:31:14.000>signal <00:31:14.139>goes <00:31:14.280>to <00:31:14.419>the <00:31:14.560>KMS <00:31:14.700>playing

643
00:31:17.900 --> 00:31:20.600
<00:31:17.900>KMS <00:31:18.180>playing <00:31:18.460>goes <00:31:18.740>to <00:31:19.020>volt <00:31:19.300>decrypts

644
00:31:20.600 --> 00:31:23.400
<00:31:20.600>the <00:31:20.727>the <00:31:20.854>secret <00:31:20.981>and <00:31:21.109>then <00:31:21.236>we've <00:31:21.363>got <00:31:21.490>the <00:31:21.618>secret <00:31:21.745>to <00:31:21.872>injected <00:31:22.000>inside

645
00:31:23.400 --> 00:31:23.900
<00:31:23.400>the <00:31:23.850>pot.

646
00:31:24.800 --> 00:31:27.400
<00:31:24.800>Now <00:31:25.080>it's <00:31:25.360>harder <00:31:25.639>for <00:31:25.919>an <00:31:26.200>attacker

647
00:31:27.400 --> 00:31:30.100
<00:31:27.400>to <00:31:27.555>get <00:31:27.711>the <00:31:27.866>secrets <00:31:28.022>because <00:31:28.177>he <00:31:28.333>can <00:31:28.488>get <00:31:28.644>access <00:31:28.800>to

648
00:31:30.100 --> 00:31:30.500
<00:31:30.100>the <00:31:30.460>muscle.

649
00:31:31.500 --> 00:31:34.600
<00:31:31.500>That's <00:31:31.655>fine. <00:31:31.811>You <00:31:31.966>will <00:31:32.122>get <00:31:32.277>a <00:31:32.433>bunch <00:31:32.588>of <00:31:32.744>encrypted <00:31:32.900>resources,

650
00:31:34.600 --> 00:31:35.100
but

651
00:31:36.200 --> 00:31:38.800
<00:31:36.200>you <00:31:36.327>will <00:31:36.454>not <00:31:36.581>have <00:31:36.709>the <00:31:36.836>case <00:31:36.963>because <00:31:37.090>the <00:31:37.218>case <00:31:37.345>is <00:31:37.472>another <00:31:37.600>system.

652
00:31:40.400 --> 00:31:40.700
if

653
00:31:42.300 --> 00:31:45.300
<00:31:42.300>Both <00:31:42.416>is <00:31:42.533>compromised <00:31:42.649>but <00:31:42.766>not <00:31:42.883>the <00:31:43.000>master <00:31:43.116>not. <00:31:43.233>Okay. <00:31:43.350>You've <00:31:43.466>got <00:31:43.583>the <00:31:43.700>private

654
00:31:45.300 --> 00:31:49.000
<00:31:45.300>Keys <00:31:45.455>you <00:31:45.611>will <00:31:45.766>notice <00:31:45.922>that <00:31:46.077>someone <00:31:46.233>has <00:31:46.388>a <00:31:46.544>story <00:31:46.700>stolen

655
00:31:48.400 --> 00:31:50.500
<00:31:48.400>your <00:31:48.866>private <00:31:49.333>keys, <00:31:49.800>but

656
00:31:51.700 --> 00:31:54.600
<00:31:51.700>The <00:31:51.933>acid <00:31:52.166>data <00:31:52.400>is <00:31:52.633>still <00:31:52.866>safe. <00:31:53.100>So

657
00:31:54.600 --> 00:31:57.400
<00:31:54.600>in <00:31:54.879>this <00:31:55.159>case <00:31:55.439>an <00:31:55.719>attacker <00:31:56.000>needs

658
00:31:57.400 --> 00:32:00.300
<00:31:57.400>to <00:31:57.680>compromise <00:31:57.960>to <00:31:58.240>systems, <00:31:58.520>which <00:31:58.800>is

659
00:32:00.300 --> 00:32:03.400
<00:32:00.300>pretty <00:32:00.500>much <00:32:00.700>better. <00:32:00.899>Right? <00:32:01.100>So <00:32:01.300>let's <00:32:01.500>let <00:32:01.700>me

660
00:32:03.400 --> 00:32:06.900
<00:32:03.400>show <00:32:03.633>you <00:32:03.866>this <00:32:04.100>in <00:32:04.333>a <00:32:04.566>demo <00:32:04.800>and

661
00:32:06.900 --> 00:32:08.600
<00:32:06.900>I <00:32:07.250>have <00:32:07.600>here <00:32:07.950>in <00:32:08.300>EQ.

662
00:32:10.800 --> 00:32:14.200
<00:32:10.800>This <00:32:11.080>one. <00:32:11.360>Okay. <00:32:11.639>So <00:32:11.919>basically <00:32:12.200>I'm

663
00:32:13.200 --> 00:32:15.800
<00:32:13.200>using <00:32:13.480>mini <00:32:13.760>cubicus. <00:32:14.040>It's <00:32:14.320>easier <00:32:14.600>to

664
00:32:17.400 --> 00:32:21.200
<00:32:17.400>share <00:32:17.575>with <00:32:17.750>you <00:32:17.925>how <00:32:18.100>how <00:32:18.275>it <00:32:18.450>works? <00:32:18.625>Okay, <00:32:18.800>basically

665
00:32:20.200 --> 00:32:22.900
<00:32:20.200>here <00:32:20.480>is <00:32:20.760>a <00:32:21.040>mini <00:32:21.320>Cube <00:32:21.600>cluster.

666
00:32:24.100 --> 00:32:28.600
<00:32:24.100>With <00:32:24.800>both <00:32:25.500>installed

667
00:32:28.600 --> 00:32:31.700
<00:32:28.600>in <00:32:28.800>the <00:32:29.000>virtual <00:32:29.199>machine, <00:32:29.399>so <00:32:29.600>it's <00:32:29.800>kubernetes <00:32:30.000>cluster

668
00:32:31.700 --> 00:32:35.000
<00:32:31.700>and <00:32:31.933>outside <00:32:32.166>the <00:32:32.400>kubernetes <00:32:32.633>cluster. <00:32:32.866>I've <00:32:33.100>got

669
00:32:35.600 --> 00:32:39.900
<00:32:35.600>a <00:32:35.833>volt <00:32:36.066>installed <00:32:36.300>and <00:32:36.533>I've <00:32:36.766>configured <00:32:37.000>all

670
00:32:38.900 --> 00:32:41.200
<00:32:38.900>the <00:32:39.600>encryption <00:32:40.300>object

671
00:32:41.200 --> 00:32:45.300
<00:32:41.200>to <00:32:41.433>relay <00:32:41.666>on <00:32:41.900>vault <00:32:42.133>to <00:32:42.366>encrypt <00:32:42.600>and

672
00:32:45.300 --> 00:32:49.400
<00:32:45.300>create <00:32:45.649>objects. <00:32:46.000>Okay, <00:32:46.350>so <00:32:46.700>you'll

673
00:32:48.400 --> 00:32:51.600
<00:32:48.400>see <00:32:48.633>that <00:32:48.866>when <00:32:49.100>I <00:32:49.333>create <00:32:49.566>an <00:32:49.800>a

674
00:32:51.600 --> 00:32:54.100
<00:32:51.600>secret. <00:32:51.740>It's <00:32:51.879>exactly <00:32:52.020>the <00:32:52.159>same. <00:32:52.300>I <00:32:52.439>do <00:32:52.580>keep <00:32:52.719>Carl <00:32:52.860>apply <00:32:53.000>of

675
00:32:54.100 --> 00:32:57.800
<00:32:54.100>a <00:32:54.379>secret <00:32:54.659>but <00:32:54.939>the <00:32:55.219>different <00:32:55.500>that

676
00:32:57.800 --> 00:33:01.700
<00:32:57.800>you <00:32:57.940>see <00:32:58.080>is <00:32:58.220>that <00:32:58.360>as <00:32:58.500>you <00:32:58.639>can <00:32:58.780>see <00:32:58.919>here. <00:32:59.060>My <00:32:59.200>content

677
00:33:00.700 --> 00:33:03.500
<00:33:00.700>is <00:33:01.400>encrypted <00:33:02.100>in

678
00:33:03.500 --> 00:33:06.200
<00:33:03.500>ATC, <00:33:03.700>so <00:33:03.900>it's <00:33:04.100>not <00:33:04.300>in <00:33:04.500>plain <00:33:04.700>text <00:33:04.900>anymore.

679
00:33:07.800 --> 00:33:09.500
<00:33:07.800>lens <00:33:08.500>wait <00:33:09.200>for

680
00:33:11.500 --> 00:33:14.800
<00:33:11.500>just <00:33:12.200>maybe <00:33:12.900>the

681
00:33:14.800 --> 00:33:17.200
<00:33:14.800>second <00:33:15.080>so <00:33:15.360>sometimes <00:33:15.639>it <00:33:15.919>takes <00:33:16.200>a

682
00:33:17.200 --> 00:33:18.900
<00:33:17.200>bit <00:33:17.480>of <00:33:17.760>time <00:33:18.040>because <00:33:18.320>yeah <00:33:18.600>now.

683
00:33:20.500 --> 00:33:23.100
<00:33:20.500>Okay. <00:33:20.655>Now <00:33:20.811>what <00:33:20.966>I <00:33:21.122>want <00:33:21.277>to <00:33:21.433>do <00:33:21.588>is <00:33:21.744>create <00:33:21.900>a

684
00:33:23.100 --> 00:33:26.800
<00:33:23.100>new <00:33:23.240>secret. <00:33:23.379>I'm <00:33:23.520>going <00:33:23.659>to <00:33:23.800>look <00:33:23.939>if <00:33:24.080>Carol <00:33:24.219>create. <00:33:24.360>I'm <00:33:24.500>just

685
00:33:26.800 --> 00:33:27.800
<00:33:26.800>create <00:33:27.250>this <00:33:27.700>video.

686
00:33:28.200 --> 00:33:31.100
<00:33:28.200>Okay. <00:33:28.340>Okay, <00:33:28.480>check <00:33:28.620>it <00:33:28.760>already <00:33:28.900>exist <00:33:29.040>because <00:33:29.180>like <00:33:29.320>I <00:33:29.460>can <00:33:29.600>do

687
00:33:32.300 --> 00:33:35.000
<00:33:32.300>I <00:33:32.407>can't <00:33:32.515>really <00:33:32.623>need <00:33:32.730>or <00:33:32.838>not. <00:33:32.946>I <00:33:33.053>mean <00:33:33.161>it <00:33:33.269>says <00:33:33.376>that <00:33:33.484>because <00:33:33.592>I've <00:33:33.700>just

688
00:33:35.400 --> 00:33:38.600
<00:33:35.400>tested <00:33:35.633>before <00:33:35.866>before <00:33:36.100>the <00:33:36.333>session. <00:33:36.566>So <00:33:36.800>and

689
00:33:38.600 --> 00:33:41.500
<00:33:38.600>now <00:33:38.833>everything <00:33:39.066>is <00:33:39.300>working <00:33:39.533>and <00:33:39.766>you <00:33:40.000>just

690
00:33:41.500 --> 00:33:44.000
<00:33:41.500>yeah <00:33:42.900>Secret.

691
00:33:45.100 --> 00:33:48.200
<00:33:45.100>Click <00:33:45.255>secret <00:33:45.411>and <00:33:45.566>you <00:33:45.722>see <00:33:45.877>here <00:33:46.033>the <00:33:46.188>DB <00:33:46.344>secret, <00:33:46.500>which

692
00:33:48.200 --> 00:33:48.700
<00:33:48.200>is <00:33:48.650>here.

693
00:33:49.100 --> 00:33:49.300
but

694
00:33:50.200 --> 00:33:52.700
<00:33:50.200>one <00:33:50.433>of <00:33:50.666>the <00:33:50.900>important <00:33:51.133>things <00:33:51.366>is <00:33:51.600>that

695
00:33:54.100 --> 00:33:57.500
<00:33:54.100>button <00:33:54.274>of <00:33:54.449>the <00:33:54.625>secret <00:33:54.800>is <00:33:54.975>encrypted <00:33:55.149>series. <00:33:55.324>I'm <00:33:55.500>going

696
00:33:57.500 --> 00:34:00.100
<00:33:57.500>to <00:33:57.733>keep <00:33:57.966>cutout <00:33:58.200>poor <00:33:58.433>forward. <00:33:58.666>I'm <00:33:58.900>going

697
00:34:00.100 --> 00:34:04.300
<00:34:00.100>to <00:34:00.255>do <00:34:00.411>a <00:34:00.566>quick <00:34:00.722>forward <00:34:00.877>to <00:34:01.033>the <00:34:01.188>atcv <00:34:01.344>database. <00:34:01.500>Basically.

698
00:34:03.300 --> 00:34:06.400
<00:34:03.300>I'm <00:34:03.500>just <00:34:03.700>going <00:34:03.899>to <00:34:04.100>simulate. <00:34:04.300>I'm <00:34:04.500>an <00:34:04.700>attacker

699
00:34:06.400 --> 00:34:09.100
<00:34:06.400>and <00:34:06.600>I <00:34:06.800>was <00:34:07.000>just <00:34:07.200>getting <00:34:07.400>access <00:34:07.600>to <00:34:07.800>ATC.

700
00:34:09.400 --> 00:34:12.600
<00:34:09.400>Now <00:34:09.680>I'm <00:34:09.960>going <00:34:10.240>to <00:34:10.520>do <00:34:10.800>apcv.

701
00:34:14.500 --> 00:34:17.600
<00:34:14.500>Kabal <00:34:14.675>which <00:34:14.850>is <00:34:15.025>a <00:34:15.199>tool <00:34:15.375>for <00:34:15.550>getting <00:34:15.725>or <00:34:15.900>for

702
00:34:17.600 --> 00:34:20.400
<00:34:17.600>interacting <00:34:17.833>with <00:34:18.066>apcd <00:34:18.299>and <00:34:18.533>I <00:34:18.766>do <00:34:19.000>a

703
00:34:20.400 --> 00:34:23.400
<00:34:20.400>get <00:34:20.540>of <00:34:20.680>a <00:34:20.820>slash <00:34:20.960>Registries <00:34:21.100>like <00:34:21.240>secret <00:34:21.380>supplies. <00:34:21.520>The <00:34:21.660>fall <00:34:21.800>as

704
00:34:23.400 --> 00:34:25.900
<00:34:23.400>large <00:34:23.680>TV <00:34:23.960>Secrets <00:34:24.240>is <00:34:24.520>where <00:34:24.800>apcv

705
00:34:26.600 --> 00:34:29.400
<00:34:26.600>stores <00:34:26.949>that <00:34:27.299>BB <00:34:27.650>secret <00:34:28.000>secret

706
00:34:30.700 --> 00:34:33.400
<00:34:30.699>if <00:34:30.899>I <00:34:31.100>do <00:34:31.299>this <00:34:31.500>you <00:34:31.699>see <00:34:31.899>I <00:34:32.100>get

707
00:34:33.400 --> 00:34:33.600
it.

708
00:34:35.100 --> 00:34:37.200
<00:34:35.100>a <00:34:35.566>bunch <00:34:36.033>of <00:34:36.500>bites

709
00:34:38.400 --> 00:34:41.500
<00:34:38.400>If <00:34:38.600>I <00:34:38.800>do <00:34:39.000>this <00:34:39.200>in <00:34:39.400>a <00:34:39.600>plane <00:34:39.800>mini

710
00:34:41.500 --> 00:34:44.900
<00:34:41.500>Cube <00:34:41.655>or <00:34:41.811>in <00:34:41.966>a <00:34:42.122>plane <00:34:42.277>kubernetes <00:34:42.433>without <00:34:42.588>setting <00:34:42.744>anything <00:34:42.900>special

711
00:34:44.900 --> 00:34:47.200
<00:34:44.900>here, <00:34:45.366>you <00:34:45.833>will <00:34:46.300>get

712
00:34:47.200 --> 00:34:51.400
<00:34:47.199>the <00:34:47.339>content <00:34:47.480>of <00:34:47.620>the <00:34:47.759>secret. <00:34:47.899>You <00:34:48.040>will <00:34:48.179>get <00:34:48.319>the <00:34:48.460>secret <00:34:48.600>itself.

713
00:34:52.100 --> 00:34:55.400
<00:34:52.100>Yes, <00:34:52.216>of <00:34:52.333>course <00:34:52.449>in <00:34:52.566>big <00:34:52.683>in <00:34:52.799>Basics <00:34:52.916>before <00:34:53.033>but <00:34:53.150>remember <00:34:53.266>the <00:34:53.383>base <00:34:53.500>64

714
00:34:55.400 --> 00:34:59.200
<00:34:55.400>is <00:34:55.555>just <00:34:55.711>an <00:34:55.866>encoding <00:34:56.022>and <00:34:56.177>not <00:34:56.333>an <00:34:56.488>encryption. <00:34:56.644>So <00:34:56.800>thanks

715
00:34:58.200 --> 00:35:00.100
<00:34:58.200>here <00:34:59.600>of

716
00:35:01.200 --> 00:35:04.700
<00:35:01.200>encryption <00:35:01.480>configuration <00:35:01.759>object <00:35:02.040>and <00:35:02.319>well, <00:35:02.600>I'm

717
00:35:04.700 --> 00:35:05.700
<00:35:04.700>able <00:35:05.149>to <00:35:05.600>increase

718
00:35:06.700 --> 00:35:09.300
<00:35:06.700>my <00:35:07.166>secret <00:35:07.633>inside <00:35:08.100>ATC

719
00:35:10.200 --> 00:35:14.100
<00:35:10.200>which <00:35:10.327>is <00:35:10.454>pretty <00:35:10.581>nice. <00:35:10.709>Okay, <00:35:10.836>because <00:35:10.963>now <00:35:11.090>I <00:35:11.218>can <00:35:11.345>be <00:35:11.472>sure <00:35:11.600>that

720
00:35:13.100 --> 00:35:16.500
<00:35:13.100>everything <00:35:13.450>will <00:35:13.799>work <00:35:14.150>as <00:35:14.500>expected.

721
00:35:17.900 --> 00:35:21.700
<00:35:17.900>Now, <00:35:18.133>let <00:35:18.366>me <00:35:18.600>stop <00:35:18.833>this <00:35:19.066>this <00:35:19.300>cluster.

722
00:35:23.600 --> 00:35:26.200
<00:35:23.600>And <00:35:23.740>I'm <00:35:23.880>going <00:35:24.020>to <00:35:24.160>start <00:35:24.299>another <00:35:24.440>cluster <00:35:24.580>and <00:35:24.720>then <00:35:24.860>I <00:35:25.000>just

723
00:35:26.200 --> 00:35:27.800
<00:35:26.200>go <00:35:26.549>again <00:35:26.899>with <00:35:27.250>the <00:35:27.600>slides.

724
00:35:28.600 --> 00:35:30.800
<00:35:28.600>Because <00:35:29.066>okay, <00:35:29.533>you <00:35:30.000>might.

725
00:35:32.500 --> 00:35:36.900
<00:35:32.500>Have <00:35:32.850>some <00:35:33.200>other <00:35:33.550>questions <00:35:33.900>regarding

726
00:35:35.900 --> 00:35:38.500
<00:35:35.900>this <00:35:36.600>because <00:35:37.300>okay.

727
00:35:39.400 --> 00:35:39.800
now

728
00:35:41.100 --> 00:35:42.100
<00:35:41.100>we're <00:35:41.549>a <00:35:42.000>story.

729
00:35:44.500 --> 00:35:47.500
<00:35:44.500>Secrets <00:35:44.780>inside <00:35:45.060>kubernetes <00:35:45.340>in <00:35:45.620>a <00:35:45.900>safe

730
00:35:47.500 --> 00:35:50.800
<00:35:47.500>way <00:35:47.733>encrypted. <00:35:47.966>We've <00:35:48.200>got <00:35:48.433>a <00:35:48.666>third <00:35:48.900>system,

731
00:35:50.800 --> 00:35:53.100
<00:35:50.800>which <00:35:51.080>is <00:35:51.360>bold <00:35:51.640>that <00:35:51.920>encrypts <00:35:52.200>the

732
00:35:53.100 --> 00:35:53.800
secrets.

733
00:35:54.800 --> 00:35:57.700
<00:35:54.800>Fine, <00:35:55.033>we've <00:35:55.266>got <00:35:55.500>still <00:35:55.733>secrets <00:35:55.966>to <00:35:56.200>store

734
00:35:57.700 --> 00:36:00.700
<00:35:57.700>data <00:35:58.166>inside <00:35:58.633>the <00:35:59.100>Repository.

735
00:36:01.700 --> 00:36:02.800
<00:36:01.700>And <00:36:02.029>they <00:36:02.360>are <00:36:02.690>stored.

736
00:36:03.300 --> 00:36:06.200
<00:36:03.300>correctly <00:36:03.475>because <00:36:03.650>they <00:36:03.825>are <00:36:04.000>encrypted <00:36:04.175>so <00:36:04.350>you <00:36:04.525>could <00:36:04.700>say

737
00:36:06.200 --> 00:36:07.300
with

738
00:36:08.400 --> 00:36:11.700
<00:36:08.400>Secrets <00:36:08.750>address <00:36:09.100>indeed <00:36:09.450>done <00:36:09.800>because

739
00:36:11.700 --> 00:36:13.100
<00:36:11.700>your <00:36:12.120>secrets <00:36:12.540>is <00:36:12.960>encrypted.

740
00:36:13.800 --> 00:36:16.600
<00:36:13.800>Are <00:36:14.080>secreting <00:36:14.360>kubernetes <00:36:14.640>at <00:36:14.920>rest <00:36:15.200>done.

741
00:36:17.100 --> 00:36:20.500
<00:36:17.100>because <00:36:17.299>we <00:36:17.500>are <00:36:17.700>using <00:36:17.900>this <00:36:18.100>KMS <00:36:18.299>plugin <00:36:18.500>which

742
00:36:20.500 --> 00:36:23.500
<00:36:20.500>includes <00:36:20.700>data <00:36:20.900>and <00:36:21.100>store <00:36:21.300>it <00:36:21.500>correlating <00:36:21.700>the <00:36:21.900>city,

743
00:36:23.500 --> 00:36:24.300
but

744
00:36:25.200 --> 00:36:27.400
<00:36:25.200>you <00:36:25.549>might <00:36:25.899>say. <00:36:26.250>Oh <00:36:26.600>great.

745
00:36:28.800 --> 00:36:29.200
but

746
00:36:30.200 --> 00:36:34.000
<00:36:30.200>at <00:36:30.399>the <00:36:30.600>end <00:36:30.799>I <00:36:31.000>injecting <00:36:31.200>this <00:36:31.399>Secret <00:36:31.600>inside

747
00:36:33.700 --> 00:36:36.400
<00:36:33.700>the <00:36:33.980>pot <00:36:34.259>inside <00:36:34.540>my <00:36:34.819>application <00:36:35.100>and

748
00:36:36.400 --> 00:36:39.600
<00:36:36.400>maybe <00:36:36.633>it's <00:36:36.866>it's <00:36:37.100>injected <00:36:37.333>as <00:36:37.566>an <00:36:37.800>enemy

749
00:36:39.600 --> 00:36:42.500
<00:36:39.600>able <00:36:39.833>or <00:36:40.066>it <00:36:40.299>injected <00:36:40.533>as <00:36:40.766>a <00:36:41.000>volume

750
00:36:42.500 --> 00:36:45.300
<00:36:42.500>as <00:36:42.700>a <00:36:42.900>file. <00:36:43.100>So <00:36:43.300>any <00:36:43.500>attacker <00:36:43.700>that <00:36:43.900>get

751
00:36:45.300 --> 00:36:46.000
access.

752
00:36:47.500 --> 00:36:48.500
<00:36:47.500>to <00:36:47.950>my <00:36:48.400>birth

753
00:36:49.700 --> 00:36:52.600
<00:36:49.700>anyone <00:36:49.839>who <00:36:49.980>has <00:36:50.120>access <00:36:50.259>to <00:36:50.399>the <00:36:50.540>pot <00:36:50.680>can <00:36:50.819>just <00:36:50.960>bring <00:36:51.100>them

754
00:36:52.600 --> 00:36:55.500
<00:36:52.600>your <00:36:52.880>own <00:36:53.160>variables <00:36:53.440>or <00:36:53.720>find <00:36:54.000>the

755
00:36:55.500 --> 00:36:58.200
<00:36:55.500>mounted <00:36:55.780>volumes <00:36:56.060>and <00:36:56.340>get <00:36:56.620>the <00:36:56.900>secret.

756
00:37:00.100 --> 00:37:00.200
so

757
00:37:01.700 --> 00:37:04.700
<00:37:01.700>if <00:37:01.875>this <00:37:02.049>works <00:37:02.225>for <00:37:02.399>you, <00:37:02.575>that's <00:37:02.750>fine. <00:37:02.924>If <00:37:03.100>you

758
00:37:04.700 --> 00:37:08.000
<00:37:04.700>are <00:37:04.980>feel <00:37:05.259>comfortable <00:37:05.540>with <00:37:05.819>this <00:37:06.100>level

759
00:37:07.300 --> 00:37:11.700
<00:37:07.300>of <00:37:07.580>security, <00:37:07.860>that's <00:37:08.140>fine, <00:37:08.420>but <00:37:08.700>they're

760
00:37:10.700 --> 00:37:13.200
<00:37:10.700>even <00:37:11.049>more <00:37:11.399>things <00:37:11.750>that <00:37:12.100>you

761
00:37:13.200 --> 00:37:15.600
<00:37:13.200>can <00:37:13.433>do <00:37:13.666>to <00:37:13.899>make <00:37:14.133>your <00:37:14.366>application <00:37:14.600>even.

762
00:37:16.900 --> 00:37:16.900
um

763
00:37:18.600 --> 00:37:21.500
<00:37:18.600>more <00:37:18.833>security <00:37:19.066>or <00:37:19.299>more <00:37:19.533>hard <00:37:19.766>to <00:37:20.000>get

764
00:37:21.500 --> 00:37:25.400
<00:37:21.500>a <00:37:21.733>break. <00:37:21.966>It's <00:37:22.200>basically <00:37:22.433>using <00:37:22.666>volts. <00:37:22.900>Basically,

765
00:37:24.400 --> 00:37:27.200
<00:37:24.400>it's <00:37:24.750>we've <00:37:25.100>got <00:37:25.450>a <00:37:25.800>note.

766
00:37:27.800 --> 00:37:30.300
<00:37:27.800>In <00:37:27.975>this <00:37:28.150>case <00:37:28.325>a <00:37:28.500>new <00:37:28.675>accumulator's <00:37:28.850>note, <00:37:29.025>which <00:37:29.200>I

767
00:37:30.300 --> 00:37:33.600
<00:37:30.300>have <00:37:30.500>my <00:37:30.700>part <00:37:30.900>and <00:37:31.100>then <00:37:31.300>in <00:37:31.500>another <00:37:31.700>node.

768
00:37:33.600 --> 00:37:36.500
<00:37:33.600>I've <00:37:33.880>got <00:37:34.160>a <00:37:34.440>key <00:37:34.720>management <00:37:35.000>system

769
00:37:36.500 --> 00:37:39.600
<00:37:36.500>or <00:37:36.850>a <00:37:37.200>secret <00:37:37.550>management <00:37:37.900>system,

770
00:37:39.600 --> 00:37:42.600
<00:37:39.600>like <00:37:39.799>for <00:37:40.000>example <00:37:40.200>hashicult <00:37:40.400>world <00:37:40.600>where <00:37:40.799>you <00:37:41.000>are

771
00:37:42.600 --> 00:37:43.900
<00:37:42.600>stored <00:37:42.990>all <00:37:43.380>your <00:37:43.770>secrets.

772
00:37:44.700 --> 00:37:47.700
<00:37:44.700>Then <00:37:44.899>what <00:37:45.100>you <00:37:45.299>do <00:37:45.500>from <00:37:45.700>your <00:37:45.899>pot <00:37:46.100>is

773
00:37:47.700 --> 00:37:49.000
<00:37:47.700>using <00:37:48.870>https.

774
00:37:50.200 --> 00:37:52.000
<00:37:50.200>to <00:37:50.666>get <00:37:51.133>the <00:37:51.600>secret

775
00:37:52.800 --> 00:37:56.600
<00:37:52.800>And <00:37:53.080>inject <00:37:53.360>this <00:37:53.640>secret <00:37:53.920>directly <00:37:54.200>into

776
00:37:56.600 --> 00:37:59.500
<00:37:56.600>memory, <00:37:56.950>so <00:37:57.299>you <00:37:57.650>are <00:37:58.000>not.

777
00:38:00.400 --> 00:38:04.600
<00:38:00.400>Setting <00:38:00.540>the <00:38:00.680>secret <00:38:00.820>as <00:38:00.960>an <00:38:01.100>environment <00:38:01.240>variable. <00:38:01.380>You <00:38:01.520>are <00:38:01.660>not <00:38:01.800>setting

778
00:38:03.600 --> 00:38:07.000
<00:38:03.600>the <00:38:03.880>secret <00:38:04.160>as <00:38:04.440>a <00:38:04.720>file. <00:38:05.000>You're

779
00:38:06.300 --> 00:38:10.000
<00:38:06.300>just <00:38:06.766>requesting <00:38:07.233>the <00:38:07.700>secret

780
00:38:09.500 --> 00:38:11.400
<00:38:09.500>and <00:38:10.900>storing.

781
00:38:12.100 --> 00:38:16.500
<00:38:12.100>As <00:38:12.299>an <00:38:12.500>as <00:38:12.700>a <00:38:12.900>variable <00:38:13.100>inside <00:38:13.299>your <00:38:13.500>problems

782
00:38:15.500 --> 00:38:18.300
<00:38:15.500>are <00:38:15.850>your <00:38:16.200>application <00:38:16.550>which <00:38:16.900>means

783
00:38:18.300 --> 00:38:21.600
<00:38:18.300>that <00:38:18.533>the <00:38:18.766>secret <00:38:19.000>just <00:38:19.233>goes <00:38:19.466>from <00:38:19.700>one

784
00:38:21.600 --> 00:38:24.500
<00:38:21.600>part <00:38:21.775>to <00:38:21.950>the <00:38:22.125>memory <00:38:22.299>of <00:38:22.475>your <00:38:22.650>pot. <00:38:22.825>So <00:38:23.000>any

785
00:38:24.500 --> 00:38:27.400
<00:38:24.500>attacker <00:38:24.850>can <00:38:25.200>just <00:38:25.550>access <00:38:25.900>to

786
00:38:27.400 --> 00:38:30.300
<00:38:27.400>the <00:38:27.540>park, <00:38:27.680>but <00:38:27.820>he <00:38:27.960>will <00:38:28.100>see <00:38:28.240>no <00:38:28.380>MBM <00:38:28.520>variables <00:38:28.660>with <00:38:28.800>the

787
00:38:30.300 --> 00:38:33.400
<00:38:30.300>secrets <00:38:30.475>no <00:38:30.650>files <00:38:30.825>with <00:38:31.000>Secrets <00:38:31.175>because <00:38:31.350>the <00:38:31.525>secrets <00:38:31.700>are

788
00:38:33.400 --> 00:38:34.900
<00:38:33.400>just <00:38:34.750>inside.

789
00:38:36.200 --> 00:38:36.600
memory

790
00:38:38.600 --> 00:38:39.000
then

791
00:38:41.500 --> 00:38:44.300
<00:38:41.500>How <00:38:41.675>you <00:38:41.850>can <00:38:42.025>work <00:38:42.200>with <00:38:42.375>this? <00:38:42.550>Okay <00:38:42.725>one <00:38:42.900>way

792
00:38:44.300 --> 00:38:49.100
<00:38:44.300>is <00:38:44.580>just <00:38:44.860>using <00:38:45.140>the <00:38:45.420>bolt <00:38:45.700>API.

793
00:38:47.100 --> 00:38:50.400
<00:38:47.100>Another <00:38:47.799>way <00:38:48.500>is

794
00:38:50.400 --> 00:38:53.700
<00:38:50.400>using <00:38:50.633>one <00:38:50.866>project <00:38:51.100>that's <00:38:51.333>name <00:38:51.566>external <00:38:51.800>secrets.

795
00:38:54.100 --> 00:38:57.400
<00:38:54.100>This <00:38:54.275>project <00:38:54.450>named <00:38:54.625>external <00:38:54.799>Secrets. <00:38:54.975>Basically, <00:38:55.150>it's <00:38:55.325>like <00:38:55.500>a

796
00:38:57.400 --> 00:39:00.900
<00:38:57.400>front <00:38:57.600>end <00:38:57.800>that <00:38:58.000>reads <00:38:58.200>secrets <00:38:58.400>from <00:38:58.600>wall <00:38:58.800>or

797
00:39:00.900 --> 00:39:01.400
<00:39:00.900>any <00:39:01.350>other.

798
00:39:03.700 --> 00:39:04.800
<00:39:03.700>Secret <00:39:04.690>store

799
00:39:05.500 --> 00:39:08.200
<00:39:05.500>and <00:39:05.966>create <00:39:06.433>kubernetes <00:39:06.900>secrets

800
00:39:09.400 --> 00:39:12.500
<00:39:09.400>that's <00:39:09.540>another <00:39:09.680>way <00:39:09.820>of <00:39:09.960>doing <00:39:10.100>it. <00:39:10.240>Okay, <00:39:10.380>so <00:39:10.520>just <00:39:10.660>store <00:39:10.800>the

801
00:39:12.500 --> 00:39:15.200
<00:39:12.500>project <00:39:12.655>George <00:39:12.811>you <00:39:12.966>just <00:39:13.122>store <00:39:13.277>all <00:39:13.433>the <00:39:13.588>secrets <00:39:13.744>in <00:39:13.900>one

802
00:39:15.200 --> 00:39:18.500
<00:39:15.200>place. <00:39:15.375>And <00:39:15.549>then <00:39:15.725>with <00:39:15.899>this <00:39:16.075>external <00:39:16.250>Secrets <00:39:16.424>tool <00:39:16.600>you

803
00:39:18.500 --> 00:39:22.000
<00:39:18.500>are <00:39:18.780>just <00:39:19.060>creating <00:39:19.340>Community <00:39:19.620>Secrets <00:39:19.900>mirror

804
00:39:21.400 --> 00:39:24.600
<00:39:21.400>it <00:39:21.750>from <00:39:22.100>these <00:39:22.450>from <00:39:22.800>this

805
00:39:24.600 --> 00:39:27.500
<00:39:24.600>store <00:39:24.950>our <00:39:25.299>secret <00:39:25.650>store <00:39:26.000>system.

806
00:39:27.500 --> 00:39:30.800
<00:39:27.500>That's <00:39:27.675>not <00:39:27.850>the <00:39:28.025>best <00:39:28.200>way <00:39:28.375>to <00:39:28.550>work <00:39:28.725>because <00:39:28.900>you

807
00:39:30.800 --> 00:39:33.500
<00:39:30.800>know, <00:39:31.000>you're <00:39:31.200>creating <00:39:31.400>Secrets <00:39:31.600>again. <00:39:31.800>So <00:39:32.000>you're <00:39:32.200>you

808
00:39:33.500 --> 00:39:36.500
<00:39:33.500>will <00:39:33.627>need <00:39:33.754>to <00:39:33.881>inject <00:39:34.009>The <00:39:34.136>Secret <00:39:34.263>inside <00:39:34.390>a <00:39:34.518>pot <00:39:34.645>but <00:39:34.772>if <00:39:34.900>you

809
00:39:36.500 --> 00:39:38.300
<00:39:36.500>feel <00:39:37.200>uncomfortable, <00:39:37.900>oh

810
00:39:39.100 --> 00:39:40.300
<00:39:39.100>making <00:39:39.640>your <00:39:40.180>application

811
00:39:41.400 --> 00:39:44.500
<00:39:41.400>Dependent <00:39:41.866>to <00:39:42.333>The <00:39:42.800>Secret

812
00:39:44.500 --> 00:39:47.300
<00:39:44.500>store, <00:39:44.733>you <00:39:44.966>can <00:39:45.200>just <00:39:45.433>use <00:39:45.666>this <00:39:45.900>project.

813
00:39:48.300 --> 00:39:51.400
<00:39:48.300>But <00:39:48.475>for <00:39:48.650>me <00:39:48.825>or <00:39:49.000>in <00:39:49.175>my <00:39:49.350>opinion, <00:39:49.525>the <00:39:49.700>best

814
00:39:51.400 --> 00:39:54.800
<00:39:51.400>one <00:39:51.555>here <00:39:51.711>is <00:39:51.866>Cash <00:39:52.022>cardboard <00:39:52.177>second <00:39:52.333>is <00:39:52.488>a <00:39:52.644>classical <00:39:52.800>evolved

815
00:39:54.800 --> 00:39:57.000
<00:39:54.800>is <00:39:54.975>a <00:39:55.150>secret <00:39:55.325>engine <00:39:55.500>that <00:39:55.675>you <00:39:55.850>can <00:39:56.025>you <00:39:56.200>know.

816
00:39:58.400 --> 00:40:01.700
<00:39:58.400>store <00:39:58.680>your <00:39:58.960>secrets <00:39:59.240>there <00:39:59.520>like <00:39:59.800>key

817
00:40:01.700 --> 00:40:02.400
<00:40:01.700>values <00:40:02.330>like

818
00:40:04.400 --> 00:40:07.700
<00:40:04.400>To <00:40:04.750>process <00:40:05.100>authentications <00:40:05.450>pki <00:40:05.800>and

819
00:40:07.700 --> 00:40:07.900
<00:40:07.700>so <00:40:07.880>on.

820
00:40:09.100 --> 00:40:10.900
<00:40:09.100>It <00:40:09.566>has <00:40:10.033>Dynamic <00:40:10.500>secrets.

821
00:40:11.800 --> 00:40:14.700
<00:40:11.800>which <00:40:11.955>you <00:40:12.111>see <00:40:12.266>in <00:40:12.422>action <00:40:12.577>in <00:40:12.733>a <00:40:12.888>few <00:40:13.044>moments, <00:40:13.200>basically

822
00:40:14.700 --> 00:40:17.000
<00:40:14.700>Dynamic <00:40:15.049>Secrets <00:40:15.399>helps <00:40:15.750>you <00:40:16.100>to

823
00:40:18.400 --> 00:40:21.500
<00:40:18.400>create <00:40:18.866>Secrets <00:40:19.333>dynamically <00:40:19.800>with

824
00:40:21.500 --> 00:40:26.100
<00:40:21.500>an <00:40:21.780>automatically <00:40:22.060>without <00:40:22.340>any <00:40:22.620>human <00:40:22.900>you

825
00:40:24.100 --> 00:40:26.700
<00:40:24.100>may <00:40:25.500>have.

826
00:40:28.500 --> 00:40:31.400
<00:40:28.500>In <00:40:28.700>this <00:40:28.900>case, <00:40:29.100>it's <00:40:29.300>the <00:40:29.500>perfect <00:40:29.700>because <00:40:29.900>it

827
00:40:31.400 --> 00:40:35.300
<00:40:31.400>means <00:40:31.600>that <00:40:31.800>nobody <00:40:32.000>will <00:40:32.200>ever <00:40:32.400>know <00:40:32.600>the <00:40:32.800>secret

828
00:40:34.300 --> 00:40:37.900
<00:40:34.300>just <00:40:34.766>vote. <00:40:35.233>So <00:40:35.700>when

829
00:40:37.900 --> 00:40:40.500
<00:40:37.900>you <00:40:38.133>start <00:40:38.366>a <00:40:38.600>database <00:40:38.833>for <00:40:39.066>example, <00:40:39.300>a

830
00:40:40.500 --> 00:40:43.800
<00:40:40.500>positive <00:40:40.733>equal <00:40:40.966>database <00:40:41.200>you <00:40:41.433>just <00:40:41.666>start <00:40:41.900>closely

831
00:40:43.800 --> 00:40:46.100
<00:40:43.800>SQL <00:40:44.033>database <00:40:44.266>you <00:40:44.500>get <00:40:44.733>access <00:40:44.966>Vault <00:40:45.200>to

832
00:40:46.100 --> 00:40:50.700
<00:40:46.100>positive <00:40:46.299>SQL <00:40:46.500>database <00:40:46.700>and <00:40:46.900>Vault <00:40:47.100>will <00:40:47.299>update <00:40:47.500>regularly

833
00:40:49.700 --> 00:40:52.300
<00:40:49.700>the <00:40:50.166>login <00:40:50.633>and <00:40:51.100>password

834
00:40:52.300 --> 00:40:54.500
<00:40:52.300>to <00:40:52.580>access <00:40:52.860>to <00:40:53.140>this <00:40:53.420>processary <00:40:53.700>sequel.

835
00:40:55.100 --> 00:40:58.300
<00:40:55.100>Then <00:40:55.380>your <00:40:55.660>applications <00:40:55.940>don't <00:40:56.220>need <00:40:56.500>to

836
00:40:58.300 --> 00:41:01.300
<00:40:58.300>know <00:40:58.580>anything <00:40:58.860>about <00:40:59.140>the <00:40:59.420>login <00:40:59.700>and

837
00:41:01.300 --> 00:41:05.200
<00:41:01.300>the <00:41:01.427>password <00:41:01.554>of <00:41:01.681>the <00:41:01.809>database <00:41:01.936>because <00:41:02.063>it's <00:41:02.190>going <00:41:02.318>to <00:41:02.445>be <00:41:02.572>full <00:41:02.700>or

838
00:41:04.200 --> 00:41:07.700
<00:41:04.200>going <00:41:04.549>to <00:41:04.899>inject <00:41:05.250>this <00:41:05.600>login

839
00:41:07.700 --> 00:41:08.900
<00:41:07.700>password <00:41:08.060>to <00:41:08.420>the <00:41:08.780>application.

840
00:41:09.900 --> 00:41:12.300
<00:41:09.900>Of <00:41:10.180>course, <00:41:10.460>you <00:41:10.740>might <00:41:11.020>said <00:41:11.300>okay

841
00:41:12.300 --> 00:41:13.900
<00:41:12.300>Alex. <00:41:12.650>That's <00:41:13.000>pretty <00:41:13.350>nice, <00:41:13.700>but

842
00:41:15.400 --> 00:41:18.400
<00:41:15.400>We <00:41:15.555>still <00:41:15.711>need <00:41:15.866>a <00:41:16.022>secret <00:41:16.177>how <00:41:16.333>you <00:41:16.488>access <00:41:16.644>hashicorn <00:41:16.800>volt

843
00:41:18.400 --> 00:41:21.700
<00:41:18.400>right? <00:41:18.555>Because <00:41:18.711>you <00:41:18.866>said <00:41:19.022>okay. <00:41:19.177>I've <00:41:19.333>got <00:41:19.488>the <00:41:19.644>secrets. <00:41:19.800>I've

844
00:41:21.700 --> 00:41:24.100
<00:41:21.700>got <00:41:21.899>dynamic <00:41:22.100>dynamic <00:41:22.299>Secrets <00:41:22.500>inside <00:41:22.700>hashical <00:41:22.899>world. <00:41:23.100>So

845
00:41:24.100 --> 00:41:27.900
<00:41:24.100>my <00:41:24.255>application <00:41:24.411>the <00:41:24.566>know <00:41:24.722>about <00:41:24.877>anything <00:41:25.033>about <00:41:25.188>the <00:41:25.344>possibly <00:41:25.500>SQL

846
00:41:27.900 --> 00:41:30.200
<00:41:27.900>credentials <00:41:28.250>because <00:41:28.600>they <00:41:28.950>are <00:41:29.300>injected

847
00:41:30.200 --> 00:41:32.400
<00:41:30.200>automatically <00:41:30.549>by <00:41:30.899>both <00:41:31.250>super <00:41:31.600>cool.

848
00:41:33.200 --> 00:41:33.500
but

849
00:41:34.600 --> 00:41:37.300
<00:41:34.600>How <00:41:34.775>can <00:41:34.950>I <00:41:35.125>access <00:41:35.299>both <00:41:35.475>I <00:41:35.650>need <00:41:35.825>also <00:41:36.000>to

850
00:41:37.300 --> 00:41:40.700
<00:41:37.300>protect <00:41:37.580>so <00:41:37.860>I <00:41:38.140>still <00:41:38.420>need <00:41:38.700>a

851
00:41:40.700 --> 00:41:43.600
<00:41:40.700>login <00:41:40.980>and <00:41:41.259>password <00:41:41.540>to <00:41:41.819>access <00:41:42.100>hashicorovo?

852
00:41:45.400 --> 00:41:46.800
<00:41:45.400>that's <00:41:46.030>true, <00:41:46.660>but

853
00:41:48.200 --> 00:41:51.800
<00:41:48.200>world <00:41:48.480>has <00:41:48.759>one <00:41:49.040>authentication <00:41:49.319>method <00:41:49.600>that

854
00:41:51.800 --> 00:41:54.500
<00:41:51.800>is <00:41:52.150>named <00:41:52.500>puberty <00:41:52.850>space <00:41:53.200>basically.

855
00:41:55.200 --> 00:41:58.400
<00:41:55.200>you <00:41:55.433>define <00:41:55.666>which <00:41:55.899>parts <00:41:56.133>can <00:41:56.366>access <00:41:56.600>to

856
00:41:58.400 --> 00:42:00.900
<00:41:58.400>I <00:41:58.750>should <00:41:59.100>control <00:41:59.450>and <00:41:59.800>then

857
00:42:01.900 --> 00:42:04.400
<00:42:01.900>at <00:42:02.180>that <00:42:02.460>point <00:42:02.740>when <00:42:03.020>hashikot <00:42:03.300>ball

858
00:42:04.400 --> 00:42:07.400
<00:42:04.400>detective <00:42:04.633>request <00:42:04.866>from <00:42:05.100>a <00:42:05.333>pot <00:42:05.566>that <00:42:05.800>has

859
00:42:07.400 --> 00:42:10.700
<00:42:07.400>been <00:42:07.575>always <00:42:07.750>to <00:42:07.925>access. <00:42:08.100>It. <00:42:08.275>Just <00:42:08.450>let <00:42:08.625>go <00:42:08.800>in.

860
00:42:12.200 --> 00:42:15.900
<00:42:12.200>So <00:42:12.339>basically <00:42:12.480>it <00:42:12.620>works <00:42:12.759>in <00:42:12.899>this <00:42:13.040>way. <00:42:13.180>It's <00:42:13.319>a <00:42:13.460>bit <00:42:13.600>complicated

861
00:42:15.900 --> 00:42:18.100
<00:42:15.900>and <00:42:16.100>I'm <00:42:16.300>just <00:42:16.500>not <00:42:16.700>want <00:42:16.900>to <00:42:17.100>stand <00:42:17.300>on

862
00:42:18.100 --> 00:42:21.400
<00:42:18.100>this <00:42:18.227>but <00:42:18.354>you've <00:42:18.481>got <00:42:18.609>your <00:42:18.736>application <00:42:18.863>running <00:42:18.990>in <00:42:19.118>your <00:42:19.245>pot <00:42:19.372>and <00:42:19.500>basically

863
00:42:22.900 --> 00:42:25.600
<00:42:22.900>This <00:42:23.055>application <00:42:23.211>just <00:42:23.366>go <00:42:23.522>to <00:42:23.677>Vault <00:42:23.833>and <00:42:23.988>say <00:42:24.144>hey <00:42:24.300>Vault.

864
00:42:25.600 --> 00:42:29.900
<00:42:25.600>I <00:42:25.755>want <00:42:25.911>to <00:42:26.066>access <00:42:26.222>you <00:42:26.377>and <00:42:26.533>then <00:42:26.688>the <00:42:26.844>wall <00:42:27.000>server

865
00:42:28.900 --> 00:42:31.400
<00:42:28.900>validation <00:42:29.600>verifies <00:42:30.300>with

866
00:42:31.400 --> 00:42:34.400
<00:42:31.400>the <00:42:31.633>kubernetes <00:42:31.866>API <00:42:32.100>if <00:42:32.333>this <00:42:32.566>spot <00:42:32.800>is

867
00:42:34.400 --> 00:42:37.300
<00:42:34.400>a <00:42:34.540>valid <00:42:34.680>pot <00:42:34.820>and <00:42:34.960>if <00:42:35.100>it's <00:42:35.240>a <00:42:35.380>valid <00:42:35.520>but <00:42:35.660>then <00:42:35.800>okay,

868
00:42:37.300 --> 00:42:40.300
<00:42:37.300>it <00:42:37.440>Returns <00:42:37.580>the <00:42:37.720>policies <00:42:37.860>and <00:42:38.000>it <00:42:38.140>turns <00:42:38.280>about <00:42:38.420>token <00:42:38.560>to <00:42:38.700>access

869
00:42:40.300 --> 00:42:43.100
<00:42:40.300>to <00:42:40.455>see <00:42:40.611>the <00:42:40.766>secret <00:42:40.922>and <00:42:41.077>then <00:42:41.233>the <00:42:41.388>application <00:42:41.544>finally <00:42:41.700>can

870
00:42:43.100 --> 00:42:45.300
<00:42:43.100>just <00:42:43.380>request <00:42:43.660>secrets <00:42:43.940>and <00:42:44.220>return <00:42:44.500>secrets.

871
00:42:45.700 --> 00:42:48.700
<00:42:45.700>It's <00:42:45.855>a <00:42:46.011>bit <00:42:46.166>more <00:42:46.322>complicated <00:42:46.477>than <00:42:46.633>this <00:42:46.788>but <00:42:46.944>overall <00:42:47.100>if

872
00:42:48.700 --> 00:42:50.800
<00:42:48.700>you're <00:42:48.855>curious <00:42:49.011>of <00:42:49.166>how <00:42:49.322>this <00:42:49.477>work <00:42:49.633>is <00:42:49.788>in <00:42:49.944>this <00:42:50.100>way.

873
00:42:51.400 --> 00:42:51.700
but

874
00:42:52.100 --> 00:42:55.600
<00:42:52.100>let <00:42:52.240>me <00:42:52.380>show <00:42:52.520>you <00:42:52.660>an <00:42:52.799>example <00:42:52.940>and <00:42:53.080>or <00:42:53.220>another <00:42:53.360>example <00:42:53.500>in

875
00:42:55.600 --> 00:42:56.000
<00:42:55.600>this <00:42:55.960>case.

876
00:42:57.500 --> 00:42:58.800
<00:42:57.500>It's <00:42:58.670>it's

877
00:43:00.400 --> 00:43:03.600
<00:43:00.400>application <00:43:00.750>that <00:43:01.100>returns <00:43:01.450>welcome <00:43:01.800>messages.

878
00:43:03.600 --> 00:43:06.900
<00:43:03.600>I've <00:43:03.833>got <00:43:04.066>one <00:43:04.299>application <00:43:04.533>that <00:43:04.766>returns <00:43:05.000>welcome

879
00:43:06.900 --> 00:43:10.200
<00:43:06.900>messages <00:43:07.075>I <00:43:07.250>said <00:43:07.425>and <00:43:07.600>it <00:43:07.775>goes <00:43:07.950>to <00:43:08.125>the <00:43:08.300>positive

880
00:43:09.200 --> 00:43:11.400
<00:43:09.200>SQL <00:43:10.600>database.

881
00:43:12.700 --> 00:43:15.400
<00:43:12.700>To <00:43:12.980>get <00:43:13.259>the <00:43:13.540>names <00:43:13.819>of <00:43:14.100>the

882
00:43:15.400 --> 00:43:18.300
<00:43:15.400>people <00:43:15.527>who <00:43:15.654>you <00:43:15.781>want. <00:43:15.909>You <00:43:16.036>can <00:43:16.163>do <00:43:16.290>a <00:43:16.418>welcome <00:43:16.545>message. <00:43:16.672>Okay, <00:43:16.800>so

883
00:43:18.300 --> 00:43:21.900
<00:43:18.300>I've <00:43:18.455>got <00:43:18.611>a <00:43:18.766>positive <00:43:18.922>SQL <00:43:19.077>database. <00:43:19.233>I've <00:43:19.388>got <00:43:19.544>my <00:43:19.700>application

884
00:43:21.900 --> 00:43:24.900
<00:43:21.900>that <00:43:22.180>gets <00:43:22.460>welcome <00:43:22.740>misses <00:43:23.020>from <00:43:23.300>this

885
00:43:24.900 --> 00:43:26.200
<00:43:24.900>database, <00:43:26.069>but

886
00:43:27.600 --> 00:43:31.600
<00:43:27.600>What's <00:43:27.799>really <00:43:28.000>interesting <00:43:28.200>here? <00:43:28.400>And <00:43:28.600>is <00:43:28.799>that <00:43:29.000>and

887
00:43:30.600 --> 00:43:33.700
<00:43:30.600>I've <00:43:31.066>got <00:43:31.533>here <00:43:32.000>not.

888
00:43:34.500 --> 00:43:37.700
<00:43:34.500>And <00:43:34.675>well, <00:43:34.850>I <00:43:35.025>can <00:43:35.200>show <00:43:35.375>you <00:43:35.550>later. <00:43:35.725>Maybe <00:43:35.900>not

889
00:43:37.700 --> 00:43:40.600
<00:43:37.700>here, <00:43:37.839>but <00:43:37.980>it <00:43:38.120>doesn't <00:43:38.259>matter <00:43:38.399>I <00:43:38.540>can <00:43:38.680>show <00:43:38.819>you. <00:43:38.960>Is <00:43:39.100>there

890
00:43:40.600 --> 00:43:43.300
<00:43:40.600>a <00:43:40.740>question <00:43:40.880>about <00:43:41.020>this? <00:43:41.160>I <00:43:41.299>can <00:43:41.440>show <00:43:41.580>you <00:43:41.720>basically <00:43:41.860>in <00:43:42.000>this

891
00:43:43.300 --> 00:43:45.400
<00:43:43.300>case <00:43:43.650>this <00:43:44.000>application <00:43:44.350>has <00:43:44.700>no.

892
00:43:46.600 --> 00:43:49.100
<00:43:46.600>Logins <00:43:46.950>and <00:43:47.299>password. <00:43:47.650>So <00:43:48.000>my

893
00:43:49.100 --> 00:43:52.400
<00:43:49.100>name <00:43:49.333>up <00:43:49.566>my <00:43:49.799>my <00:43:50.033>application <00:43:50.266>has <00:43:50.500>no

894
00:43:52.400 --> 00:43:55.200
<00:43:52.400>clue <00:43:52.555>about <00:43:52.711>the <00:43:52.866>credentials <00:43:53.022>of <00:43:53.177>the <00:43:53.333>positive <00:43:53.488>sequel <00:43:53.644>because <00:43:53.800>it's

895
00:43:55.200 --> 00:43:56.100
<00:43:55.200>going <00:43:55.470>to <00:43:55.740>be <00:43:56.009>well.

896
00:43:56.800 --> 00:44:00.100
<00:43:56.800>That <00:43:57.000>is <00:43:57.200>going <00:43:57.400>to <00:43:57.600>inject <00:43:57.800>that <00:43:58.000>credentials <00:43:58.200>when

897
00:43:59.100 --> 00:44:02.900
<00:43:59.100>the <00:43:59.450>applications <00:43:59.799>start. <00:44:00.150>So <00:44:00.500>let

898
00:44:02.900 --> 00:44:05.400
<00:44:02.900>me <00:44:03.180>first <00:44:03.460>of <00:44:03.740>all <00:44:04.020>deploy <00:44:04.300>volt.

899
00:44:06.600 --> 00:44:08.200
<00:44:06.600>Let <00:44:07.066>me <00:44:07.533>change <00:44:08.000>Q.

900
00:44:08.700 --> 00:44:09.500
<00:44:08.700>And <00:44:09.420>Mass.

901
00:44:10.900 --> 00:44:13.700
<00:44:10.900>Vault <00:44:11.600>or <00:44:12.300>dynamic.

902
00:44:13.700 --> 00:44:16.300
<00:44:13.700>Okay, <00:44:13.839>and <00:44:13.980>now <00:44:14.120>I'm <00:44:14.259>then <00:44:14.399>going <00:44:14.540>to <00:44:14.680>do <00:44:14.819>keep <00:44:14.960>Cala <00:44:15.100>apply

903
00:44:16.300 --> 00:44:19.500
<00:44:16.300>musef <00:44:16.500>of <00:44:16.700>wall. <00:44:16.900>I'm <00:44:17.100>just <00:44:17.300>this <00:44:17.500>is <00:44:17.700>just

904
00:44:19.500 --> 00:44:23.100
<00:44:19.500>a <00:44:19.655>yaml <00:44:19.811>file <00:44:19.966>that <00:44:20.122>deploys <00:44:20.277>volt <00:44:20.433>in <00:44:20.588>my <00:44:20.744>kubernetes <00:44:20.900>cluster.

905
00:44:22.100 --> 00:44:25.300
<00:44:22.100>You <00:44:22.275>can <00:44:22.450>just <00:44:22.625>held <00:44:22.799>and <00:44:22.975>so <00:44:23.150>on <00:44:23.325>but <00:44:23.500>okay

906
00:44:25.300 --> 00:44:26.000
<00:44:25.300>and <00:44:25.930>just

907
00:44:26.300 --> 00:44:28.600
<00:44:26.300>you <00:44:26.455>both <00:44:26.611>you <00:44:26.766>see <00:44:26.922>both <00:44:27.077>now <00:44:27.233>almost <00:44:27.388>up <00:44:27.544>and <00:44:27.700>running.

908
00:44:30.800 --> 00:44:33.100
<00:44:30.800>Okay. <00:44:31.000>Now <00:44:31.200>what <00:44:31.400>is <00:44:31.600>running <00:44:31.800>now? <00:44:32.000>I'm <00:44:32.200>just

909
00:44:33.100 --> 00:44:34.400
<00:44:33.100>going <00:44:33.685>to <00:44:34.270>create.

910
00:44:35.400 --> 00:44:35.900
one

911
00:44:37.900 --> 00:44:40.200
<00:44:37.900>world's <00:44:38.250>secret <00:44:38.600>basically <00:44:38.950>the <00:44:39.300>secret

912
00:44:40.200 --> 00:44:42.200
<00:44:40.200>are <00:44:40.899>used <00:44:41.600>to

913
00:44:45.400 --> 00:44:45.500
have

914
00:44:46.500 --> 00:44:46.900
the

915
00:44:48.900 --> 00:44:51.700
<00:44:48.900>secret <00:44:49.133>that <00:44:49.366>I <00:44:49.600>want <00:44:49.833>to <00:44:50.066>inject <00:44:50.300>inside

916
00:44:51.700 --> 00:44:55.800
<00:44:51.700>what <00:44:51.839>because <00:44:51.980>at <00:44:52.120>the <00:44:52.259>end <00:44:52.399>you <00:44:52.540>need <00:44:52.680>to <00:44:52.819>create <00:44:52.960>data <00:44:53.100>inside

917
00:44:55.800 --> 00:44:56.200
volt.

918
00:44:56.700 --> 00:44:59.700
<00:44:56.700>And <00:44:56.875>one <00:44:57.049>way <00:44:57.225>of <00:44:57.399>doing <00:44:57.575>this <00:44:57.750>for <00:44:57.924>inserting <00:44:58.100>these

919
00:44:59.700 --> 00:45:02.300
<00:44:59.700>data <00:45:00.049>inside <00:45:00.399>all <00:45:00.750>these <00:45:01.100>secrets

920
00:45:02.300 --> 00:45:05.200
<00:45:02.300>and <00:45:02.416>volt <00:45:02.533>is <00:45:02.650>using <00:45:02.766>volt <00:45:02.883>Secrets. <00:45:03.000>There <00:45:03.116>are <00:45:03.233>other <00:45:03.350>ways, <00:45:03.466>but <00:45:03.583>I <00:45:03.700>just

921
00:45:05.200 --> 00:45:08.400
<00:45:05.200>going <00:45:05.399>to <00:45:05.600>the <00:45:05.799>easiest <00:45:06.000>one <00:45:06.200>now. <00:45:06.399>I'm <00:45:06.600>going

922
00:45:08.400 --> 00:45:10.700
<00:45:08.400>to <00:45:08.633>deploy <00:45:08.866>the <00:45:09.100>possible <00:45:09.333>database <00:45:09.566>as <00:45:09.800>well.

923
00:45:12.200 --> 00:45:12.800
oops

924
00:45:15.400 --> 00:45:18.200
<00:45:15.400>That's <00:45:15.633>that <00:45:15.866>possible <00:45:16.100>SQL <00:45:16.333>now, <00:45:16.566>I'm <00:45:16.800>just

925
00:45:18.200 --> 00:45:21.700
<00:45:18.200>creating <00:45:18.399>here <00:45:18.600>the <00:45:18.799>positive <00:45:19.000>SQL <00:45:19.200>this <00:45:19.399>positive <00:45:19.600>SQL

926
00:45:21.700 --> 00:45:23.400
<00:45:21.700>database <00:45:21.980>now, <00:45:22.259>it <00:45:22.540>has <00:45:22.819>no <00:45:23.100>credentials.

927
00:45:25.300 --> 00:45:28.300
<00:45:25.300>So <00:45:25.475>my <00:45:25.650>application <00:45:25.825>can <00:45:26.000>my <00:45:26.175>application <00:45:26.350>cannot <00:45:26.525>access <00:45:26.700>to

928
00:45:28.300 --> 00:45:29.500
<00:45:28.300>this <00:45:29.380>application?

929
00:45:30.800 --> 00:45:32.300
<00:45:30.800>now <00:45:31.475>when <00:45:32.150>the

930
00:45:33.400 --> 00:45:33.700
was

931
00:45:34.900 --> 00:45:35.200
<00:45:34.900>come <00:45:35.170>on.

932
00:45:36.200 --> 00:45:39.500
<00:45:36.200>Now <00:45:36.433>positive <00:45:36.666>SQL <00:45:36.899>is <00:45:37.133>running <00:45:37.366>then <00:45:37.600>other

933
00:45:39.500 --> 00:45:42.500
<00:45:39.500>thing <00:45:39.640>I'm <00:45:39.780>going <00:45:39.920>to <00:45:40.060>do <00:45:40.200>is <00:45:40.340>configure <00:45:40.480>your <00:45:40.620>wall. <00:45:40.760>I'm <00:45:40.900>going

934
00:45:42.500 --> 00:45:46.400
<00:45:42.500>to <00:45:42.733>look <00:45:42.966>we've <00:45:43.200>got <00:45:43.433>a <00:45:43.666>lot <00:45:43.900>job.

935
00:45:47.900 --> 00:45:50.600
<00:45:47.900>Now <00:45:48.180>I've <00:45:48.460>got <00:45:48.740>both <00:45:49.020>with <00:45:49.300>secrets.

936
00:45:50.600 --> 00:45:54.000
<00:45:50.600>So <00:45:50.833>I've <00:45:51.066>Got <00:45:51.299>My <00:45:51.533>Vault <00:45:51.766>instance <00:45:52.000>with

937
00:45:53.400 --> 00:45:56.600
<00:45:53.400>some <00:45:53.680>secrets <00:45:53.960>in <00:45:54.240>this <00:45:54.520>case. <00:45:54.800>I

938
00:45:56.600 --> 00:45:58.100
<00:45:56.600>have <00:45:57.275>no <00:45:57.950>secret.

939
00:45:58.700 --> 00:46:03.000
<00:45:58.700>I <00:45:58.899>just <00:45:59.100>configured <00:45:59.299>Vault <00:45:59.500>to <00:45:59.700>say <00:45:59.899>Vault <00:46:00.100>connect

940
00:46:02.500 --> 00:46:05.300
<00:46:02.500>to <00:46:02.780>these <00:46:03.060>positive <00:46:03.340>SQL <00:46:03.620>database <00:46:03.900>and

941
00:46:05.300 --> 00:46:08.900
<00:46:05.300>set <00:46:05.650>a <00:46:06.000>login <00:46:06.350>and <00:46:06.700>password.

942
00:46:10.100 --> 00:46:13.300
<00:46:10.100>See <00:46:10.207>that <00:46:10.315>I <00:46:10.423>have <00:46:10.530>no <00:46:10.638>clue <00:46:10.746>which <00:46:10.853>is <00:46:10.961>the <00:46:11.069>login <00:46:11.176>and <00:46:11.284>the <00:46:11.392>password. <00:46:11.500>It's

943
00:46:13.300 --> 00:46:16.800
<00:46:13.300>something <00:46:13.533>that <00:46:13.766>it <00:46:14.000>just <00:46:14.233>happening <00:46:14.466>then <00:46:14.700>anglically

944
00:46:16.800 --> 00:46:19.700
<00:46:16.800>automatically, <00:46:17.033>so <00:46:17.266>I <00:46:17.500>don't <00:46:17.733>know <00:46:17.966>the <00:46:18.200>secret

945
00:46:19.700 --> 00:46:22.500
<00:46:19.700>if <00:46:19.799>I <00:46:19.899>don't <00:46:20.000>know <00:46:20.100>if <00:46:20.200>I <00:46:20.299>don't <00:46:20.399>know <00:46:20.500>the <00:46:20.600>secret <00:46:20.700>means <00:46:20.799>that <00:46:20.899>I <00:46:21.000>can <00:46:21.100>change

946
00:46:22.500 --> 00:46:23.400
<00:46:22.500>it <00:46:22.905>with <00:46:23.310>anyone.

947
00:46:25.200 --> 00:46:26.400
Let's

948
00:46:28.600 --> 00:46:30.100
<00:46:28.600>apply <00:46:28.937>now, <00:46:29.275>let's <00:46:29.612>apply <00:46:29.950>the

949
00:46:32.600 --> 00:46:35.200
<00:46:32.600>application. <00:46:32.775>First <00:46:32.950>of <00:46:33.125>all, <00:46:33.299>I'm <00:46:33.475>going <00:46:33.650>to <00:46:33.825>do <00:46:34.000>the

950
00:46:35.200 --> 00:46:38.300
<00:46:35.200>name <00:46:35.480>application. <00:46:35.759>And <00:46:36.040>now <00:46:36.319>that <00:46:36.600>they've

951
00:46:38.300 --> 00:46:39.700
<00:46:38.300>got <00:46:38.510>the <00:46:38.720>name <00:46:38.930>application <00:46:39.140>that <00:46:39.350>I'm <00:46:39.560>running.

952
00:46:42.300 --> 00:46:45.400
<00:46:42.300>I'm <00:46:42.500>going <00:46:42.700>to <00:46:42.900>apply <00:46:43.100>the <00:46:43.300>final <00:46:43.500>that's <00:46:43.700>the

953
00:46:45.400 --> 00:46:45.900
<00:46:45.400>front <00:46:45.850>end.

954
00:46:46.800 --> 00:46:47.500
<00:46:46.800>Just <00:46:47.115>run <00:46:47.430>it.

955
00:46:49.200 --> 00:46:53.600
<00:46:49.200>Now, <00:46:49.355>I've <00:46:49.511>got <00:46:49.666>my <00:46:49.822>application <00:46:49.977>up <00:46:50.133>and <00:46:50.288>running <00:46:50.444>perfectly <00:46:50.600>with

956
00:46:52.600 --> 00:46:55.600
<00:46:52.600>no <00:46:53.299>secrets <00:46:54.000>regarding

957
00:46:55.600 --> 00:46:56.300
<00:46:55.600>the <00:46:56.230>database.

958
00:46:57.900 --> 00:47:01.000
<00:46:57.900>Finally <00:46:58.100>I <00:46:58.300>can <00:46:58.500>to <00:46:58.700>give <00:46:58.900>Carol <00:46:59.100>for <00:46:59.300>word.

959
00:47:02.300 --> 00:47:03.600
<00:47:02.300>I <00:47:02.592>think <00:47:02.885>that <00:47:03.177>this <00:47:03.470>one.

960
00:47:04.300 --> 00:47:07.500
<00:47:04.300>In <00:47:04.440>a <00:47:04.580>way <00:47:04.720>to <00:47:04.860>a <00:47:05.000>curl <00:47:05.140>of <00:47:05.280>Local <00:47:05.420>Host, <00:47:05.560>welcome <00:47:05.700>message.

961
00:47:07.500 --> 00:47:10.300
<00:47:07.500>You're <00:47:07.675>going <00:47:07.850>to <00:47:08.025>start <00:47:08.200>seeing <00:47:08.375>some <00:47:08.550>messages <00:47:08.725>here <00:47:08.900>like

962
00:47:10.300 --> 00:47:14.100
<00:47:10.300>a <00:47:10.440>lot <00:47:10.580>of <00:47:10.720>and <00:47:10.860>Joanna <00:47:11.000>all <00:47:11.140>I <00:47:11.280>had <00:47:11.420>son. <00:47:11.560>Hola <00:47:11.700>kamash

963
00:47:13.100 --> 00:47:16.900
<00:47:13.100>all <00:47:13.380>Alexander <00:47:13.660>and <00:47:13.940>Swan. <00:47:14.220>Okay. <00:47:14.500>It's

964
00:47:16.900 --> 00:47:20.100
<00:47:16.900>a <00:47:17.100>random <00:47:17.300>messages <00:47:17.500>that <00:47:17.700>are <00:47:17.900>taken <00:47:18.100>from <00:47:18.300>these

965
00:47:19.100 --> 00:47:22.600
<00:47:19.100>database <00:47:19.380>from <00:47:19.660>positive <00:47:19.940>SQL <00:47:20.220>database, <00:47:20.500>but

966
00:47:22.600 --> 00:47:26.500
<00:47:22.600>remember <00:47:22.799>and <00:47:23.000>that's <00:47:23.200>the <00:47:23.400>key <00:47:23.600>point <00:47:23.799>that <00:47:24.000>my

967
00:47:25.500 --> 00:47:28.600
<00:47:25.500>application <00:47:26.200>has <00:47:26.900>no

968
00:47:28.600 --> 00:47:31.200
<00:47:28.600>so <00:47:28.950>he <00:47:29.299>knows <00:47:29.650>the <00:47:30.000>login

969
00:47:31.200 --> 00:47:35.000
<00:47:31.200>and <00:47:31.375>password <00:47:31.549>of <00:47:31.725>the <00:47:31.899>possible <00:47:32.075>because <00:47:32.250>ball <00:47:32.424>has <00:47:32.600>injected

970
00:47:34.600 --> 00:47:37.300
<00:47:34.600>up <00:47:34.950>at <00:47:35.299>something <00:47:35.650>time <00:47:36.000>but

971
00:47:37.300 --> 00:47:40.500
<00:47:37.300>not <00:47:37.650>because <00:47:38.000>I <00:47:38.350>said <00:47:38.700>anywhere

972
00:47:43.400 --> 00:47:46.500
<00:47:43.400>Uh, <00:47:43.555>just <00:47:43.711>the <00:47:43.866>last <00:47:44.022>things <00:47:44.177>is <00:47:44.333>that <00:47:44.488>I'm <00:47:44.644>the <00:47:44.800>author

973
00:47:46.500 --> 00:47:49.400
<00:47:46.500>of <00:47:46.675>this <00:47:46.850>two <00:47:47.025>books. <00:47:47.200>The <00:47:47.375>one <00:47:47.550>is <00:47:47.725>github's <00:47:47.900>cookbook

974
00:47:49.400 --> 00:47:52.400
<00:47:49.400>where <00:47:49.540>we <00:47:49.680>are <00:47:49.820>exploring <00:47:49.960>some <00:47:50.100>of <00:47:50.240>these <00:47:50.380>things <00:47:50.520>of <00:47:50.660>these <00:47:50.800>topics

975
00:47:52.400 --> 00:47:55.600
<00:47:52.400>not <00:47:52.540>all <00:47:52.680>of <00:47:52.820>them, <00:47:52.960>but <00:47:53.100>you'll <00:47:53.240>see <00:47:53.380>things <00:47:53.520>like <00:47:53.660>cargo <00:47:53.800>CD

976
00:47:55.600 --> 00:47:58.100
<00:47:55.600>and <00:47:55.880>secret <00:47:56.160>management <00:47:56.440>some <00:47:56.720>secrets <00:47:57.000>and

977
00:47:58.100 --> 00:48:01.400
<00:47:58.100>so <00:47:58.240>on <00:47:58.380>and <00:47:58.520>you <00:47:58.660>can <00:47:58.799>download <00:47:58.940>it <00:47:59.080>for <00:47:59.220>free <00:47:59.360>you <00:47:59.500>can

978
00:48:01.400 --> 00:48:04.800
<00:48:01.400>go <00:48:01.600>to <00:48:01.800>developers <00:48:02.000>address.com <00:48:02.200>slash <00:48:02.400>ebooks <00:48:02.600>like <00:48:02.800>book

979
00:48:04.800 --> 00:48:08.500
<00:48:04.800>or <00:48:05.000>you <00:48:05.200>can <00:48:05.400>just <00:48:05.600>search <00:48:05.800>in <00:48:06.000>Google <00:48:06.200>meetups

980
00:48:07.500 --> 00:48:10.800
<00:48:07.500>cookbook. <00:48:07.850>There <00:48:08.200>are <00:48:08.550>project.com <00:48:08.900>and

981
00:48:10.800 --> 00:48:11.800
<00:48:10.800>then <00:48:11.250>you <00:48:11.700>register

982
00:48:12.900 --> 00:48:13.900
<00:48:12.900>you <00:48:13.080>can <00:48:13.260>download <00:48:13.440>it <00:48:13.620>for <00:48:13.800>free.

983
00:48:14.300 --> 00:48:17.800
<00:48:14.300>Of <00:48:14.475>the <00:48:14.650>recipes <00:48:14.825>are <00:48:15.000>normally <00:48:15.175>for <00:48:15.350>free <00:48:15.525>then <00:48:15.700>we've

984
00:48:17.800 --> 00:48:20.100
<00:48:17.800>got <00:48:18.000>also <00:48:18.200>the <00:48:18.400>kubernetes <00:48:18.600>secret <00:48:18.800>management, <00:48:19.000>which <00:48:19.200>is

985
00:48:20.100 --> 00:48:24.000
<00:48:20.100>another <00:48:20.299>book <00:48:20.500>that <00:48:20.700>I <00:48:20.900>I <00:48:21.100>wrote <00:48:21.299>with <00:48:21.500>Andrew

986
00:48:23.400 --> 00:48:26.300
<00:48:23.400>block <00:48:23.633>and <00:48:23.866>we <00:48:24.100>are <00:48:24.333>covering <00:48:24.566>more <00:48:24.800>of

987
00:48:26.300 --> 00:48:29.400
<00:48:26.300>the <00:48:26.475>secret <00:48:26.650>management <00:48:26.825>some <00:48:27.000>of <00:48:27.175>the <00:48:27.350>things <00:48:27.525>that <00:48:27.700>I've

988
00:48:29.400 --> 00:48:32.400
<00:48:29.400>showed <00:48:29.516>you <00:48:29.633>here, <00:48:29.750>but <00:48:29.866>a <00:48:29.983>lot <00:48:30.100>of <00:48:30.216>more <00:48:30.333>like <00:48:30.450>for <00:48:30.566>example <00:48:30.683>how <00:48:30.800>to

989
00:48:32.400 --> 00:48:35.400
<00:48:32.400>use <00:48:32.750>Azure <00:48:33.100>as <00:48:33.450>a <00:48:33.800>secret

990
00:48:35.400 --> 00:48:38.500
<00:48:35.400>storage <00:48:35.750>and <00:48:36.100>Amazon <00:48:36.450>secret <00:48:36.800>storage

991
00:48:38.500 --> 00:48:40.800
<00:48:38.500>and <00:48:38.733>so <00:48:38.966>on. <00:48:39.200>Okay <00:48:39.433>gcp <00:48:39.666>so <00:48:39.900>it's

992
00:48:41.600 --> 00:48:42.800
<00:48:41.600>more <00:48:42.140>things <00:48:42.680>but

993
00:48:43.800 --> 00:48:46.800
<00:48:43.800>sadly <00:48:44.000>there <00:48:44.200>is <00:48:44.400>not <00:48:44.600>agreement <00:48:44.800>with <00:48:45.000>red <00:48:45.200>hat

994
00:48:46.800 --> 00:48:49.100
<00:48:46.800>so <00:48:46.940>you <00:48:47.080>can <00:48:47.220>adopt <00:48:47.360>it <00:48:47.500>for <00:48:47.640>free <00:48:47.780>you <00:48:47.920>need <00:48:48.060>to <00:48:48.200>buy

995
00:48:49.100 --> 00:48:49.600
<00:48:49.100>it, <00:48:49.549>but

996
00:48:50.200 --> 00:48:51.200
<00:48:50.200>that's <00:48:51.100>all.

997
00:48:58.600 --> 00:49:02.500
<00:48:58.600>Hello <00:48:58.950>again, <00:48:59.299>YouTube <00:48:59.650>Hello <00:49:00.000>Alexa.

998
00:49:01.500 --> 00:49:03.800
<00:49:01.500>Thanks <00:49:01.850>for <00:49:02.200>the <00:49:02.550>awesome <00:49:02.900>talk.

999
00:49:06.500 --> 00:49:09.800
<00:49:06.500>Yeah, <00:49:06.700>truly <00:49:06.900>amazing <00:49:07.100>great <00:49:07.300>energy <00:49:07.500>Alex. <00:49:07.700>I <00:49:07.900>can

1000
00:49:09.800 --> 00:49:13.200
<00:49:09.800>tell <00:49:09.907>that <00:49:10.015>your <00:49:10.123>professor. <00:49:10.230>You've <00:49:10.338>been <00:49:10.446>doing <00:49:10.553>this <00:49:10.661>for <00:49:10.769>a <00:49:10.876>little <00:49:10.984>bit. <00:49:11.092>And <00:49:11.200>yeah,

1001
00:49:12.200 --> 00:49:15.500
<00:49:12.200>and <00:49:12.375>I'm <00:49:12.549>sure <00:49:12.725>if <00:49:12.899>there's <00:49:13.075>any <00:49:13.250>high <00:49:13.424>schoolers <00:49:13.600>that

1002
00:49:15.500 --> 00:49:18.500
<00:49:15.500>are, <00:49:15.700>you <00:49:15.900>know <00:49:16.100>excited <00:49:16.300>to <00:49:16.500>start <00:49:16.700>to <00:49:16.900>develop

1003
00:49:18.500 --> 00:49:21.300
<00:49:18.500>a <00:49:18.675>journey <00:49:18.850>here <00:49:19.025>in <00:49:19.200>the <00:49:19.375>community <00:49:19.550>it <00:49:19.725>just <00:49:19.900>convince

1004
00:49:21.300 --> 00:49:25.200
<00:49:21.300>them <00:49:21.440>to <00:49:21.580>move <00:49:21.720>to <00:49:21.860>Barcelona <00:49:22.000>and <00:49:22.140>enroll <00:49:22.280>at <00:49:22.420>LaSalle <00:49:22.560>and <00:49:22.700>really

1005
00:49:24.200 --> 00:49:27.600
<00:49:24.200>thank <00:49:24.339>you <00:49:24.480>for <00:49:24.620>the <00:49:24.759>live <00:49:24.899>demos <00:49:25.040>as <00:49:25.180>well. <00:49:25.319>Super <00:49:25.460>super <00:49:25.600>nice

1006
00:49:27.600 --> 00:49:30.600
<00:49:27.600>and <00:49:27.775>I <00:49:27.950>love <00:49:28.125>the <00:49:28.299>music <00:49:28.475>analogy <00:49:28.650>and <00:49:28.825>miss <00:49:29.000>your

1007
00:49:30.600 --> 00:49:33.200
<00:49:30.600>reference <00:49:30.727>to <00:49:30.854>running <00:49:30.981>up <00:49:31.109>the <00:49:31.236>hill <00:49:31.363>either <00:49:31.490>you <00:49:31.618>really <00:49:31.745>hit <00:49:31.872>that <00:49:32.000>well.

1008
00:49:35.900 --> 00:49:38.000
<00:49:35.900>And <00:49:36.133>let <00:49:36.366>me <00:49:36.600>start <00:49:36.833>with <00:49:37.066>a <00:49:37.300>quick

1009
00:49:38.200 --> 00:49:41.200
<00:49:38.200>question <00:49:38.316>because <00:49:38.433>from <00:49:38.549>from <00:49:38.666>the <00:49:38.783>courtesy <00:49:38.899>side. <00:49:39.016>I'm <00:49:39.133>not <00:49:39.250>sure <00:49:39.366>if <00:49:39.483>you're <00:49:39.600>familiar

1010
00:49:41.200 --> 00:49:45.400
<00:49:41.200>with <00:49:41.327>our <00:49:41.454>platform, <00:49:41.581>but <00:49:41.709>it's <00:49:41.836>basically <00:49:41.963>static <00:49:42.090>analysis <00:49:42.218>solution <00:49:42.345>that <00:49:42.472>automates <00:49:42.600>or

1011
00:49:44.400 --> 00:49:47.300
<00:49:44.400>requests <00:49:44.680>and <00:49:44.960>commit <00:49:45.240>analysis <00:49:45.520>and <00:49:45.800>what

1012
00:49:47.300 --> 00:49:51.100
<00:49:47.300>I <00:49:47.427>see <00:49:47.554>when <00:49:47.681>I <00:49:47.809>talk <00:49:47.936>to <00:49:48.063>especially <00:49:48.190>the <00:49:48.318>more <00:49:48.445>modern <00:49:48.572>teams. <00:49:48.700>I

1013
00:49:50.100 --> 00:49:54.000
<00:49:50.100>see <00:49:50.255>a <00:49:50.411>trend <00:49:50.566>where <00:49:50.722>companies <00:49:50.877>are <00:49:51.033>trying <00:49:51.188>to <00:49:51.344>make <00:49:51.500>developers.

1014
00:49:53.400 --> 00:49:56.300
<00:49:53.400>Also <00:49:53.633>more <00:49:53.866>responsible <00:49:54.100>for <00:49:54.333>the <00:49:54.566>security <00:49:54.800>of

1015
00:49:56.300 --> 00:49:59.800
<00:49:56.300>the <00:49:56.455>code <00:49:56.611>base. <00:49:56.766>We <00:49:56.922>hear <00:49:57.077>a <00:49:57.233>lot <00:49:57.388>of <00:49:57.544>deaf <00:49:57.700>Cyclops

1016
00:49:59.800 --> 00:50:02.100
<00:49:59.800>nowadays. <00:50:00.500>Is <00:50:01.200>it

1017
00:50:02.100 --> 00:50:05.300
<00:50:02.100>something <00:50:02.227>you <00:50:02.354>see <00:50:02.481>as <00:50:02.609>well? <00:50:02.736>Are <00:50:02.863>there <00:50:02.990>any <00:50:03.118>sort <00:50:03.245>of <00:50:03.372>suggestions <00:50:03.500>that

1018
00:50:05.300 --> 00:50:08.900
<00:50:05.300>you <00:50:05.455>have <00:50:05.611>to <00:50:05.766>organizations <00:50:05.922>that <00:50:06.077>want <00:50:06.233>to <00:50:06.388>shift <00:50:06.544>left? <00:50:06.700>They

1019
00:50:08.900 --> 00:50:12.000
<00:50:08.900>say? <00:50:09.250>Yeah. <00:50:09.600>Yeah, <00:50:09.950>I <00:50:10.300>would

1020
00:50:11.100 --> 00:50:12.200
<00:50:11.100>say <00:50:12.089>that.

1021
00:50:12.600 --> 00:50:14.800
<00:50:12.600>and <00:50:12.880>and <00:50:13.160>I <00:50:13.440>mean <00:50:13.720>again, <00:50:14.000>it's

1022
00:50:15.100 --> 00:50:15.200
<00:50:15.100>my <00:50:15.189>personal

1023
00:50:16.200 --> 00:50:18.600
<00:50:16.200>experience <00:50:16.375>that <00:50:16.549>in <00:50:16.725>red <00:50:16.899>that <00:50:17.075>we've <00:50:17.250>got <00:50:17.424>some <00:50:17.600>kind.

1024
00:50:19.100 --> 00:50:20.500
<00:50:19.100>of <00:50:19.415>a <00:50:19.730>lot <00:50:20.045>of <00:50:20.360>traditional

1025
00:50:22.700 --> 00:50:25.200
<00:50:22.700>Enterprises <00:50:22.899>let's <00:50:23.100>say <00:50:23.299>in <00:50:23.500>this <00:50:23.700>way. <00:50:23.899>It <00:50:24.100>means

1026
00:50:25.200 --> 00:50:28.300
<00:50:25.200>that <00:50:25.307>they <00:50:25.415>are <00:50:25.523>still <00:50:25.630>I <00:50:25.738>mean <00:50:25.846>that <00:50:25.953>they <00:50:26.061>are <00:50:26.169>using <00:50:26.276>for <00:50:26.384>example <00:50:26.492>Argo <00:50:26.600>CD

1027
00:50:28.300 --> 00:50:29.500
<00:50:28.300>they <00:50:28.660>are <00:50:29.020>using <00:50:29.380>kubernetes.

1028
00:50:29.600 --> 00:50:32.400
<00:50:29.600>They <00:50:29.799>are <00:50:30.000>using <00:50:30.200>istio. <00:50:30.400>They're <00:50:30.600>using <00:50:30.799>really <00:50:31.000>nice.

1029
00:50:33.800 --> 00:50:36.400
<00:50:33.800>technology <00:50:34.150>or <00:50:34.500>advanced <00:50:34.850>technology, <00:50:35.200>but

1030
00:50:37.200 --> 00:50:41.000
<00:50:37.200>let's <00:50:37.339>say <00:50:37.480>that <00:50:37.620>the <00:50:37.759>teams <00:50:37.899>are <00:50:38.040>still, <00:50:38.180>you <00:50:38.319>know, <00:50:38.460>not <00:50:38.600>The

1031
00:50:40.400 --> 00:50:43.100
<00:50:40.400>Silo <00:50:40.555>as <00:50:40.711>we <00:50:40.866>and <00:50:41.022>the <00:50:41.177>student <00:50:41.333>in <00:50:41.488>the <00:50:41.644>past, <00:50:41.800>but

1032
00:50:43.100 --> 00:50:46.400
<00:50:43.100>there's <00:50:43.227>still <00:50:43.354>you <00:50:43.481>know, <00:50:43.609>the <00:50:43.736>security <00:50:43.863>deal <00:50:43.990>and <00:50:44.118>it's <00:50:44.245>like <00:50:44.372>okay <00:50:44.500>you

1033
00:50:46.400 --> 00:50:49.100
<00:50:46.400>developers <00:50:46.750>develop <00:50:47.100>and <00:50:47.450>will <00:50:47.800>take

1034
00:50:49.100 --> 00:50:53.000
<00:50:49.100>over <00:50:49.227>after <00:50:49.354>and <00:50:49.481>they <00:50:49.609>will <00:50:49.736>review <00:50:49.863>and <00:50:49.990>so <00:50:50.118>on <00:50:50.245>so <00:50:50.372>there <00:50:50.500>let's

1035
00:50:52.100 --> 00:50:54.100
<00:50:52.100>say <00:50:52.566>that <00:50:53.033>there's <00:50:53.500>still

1036
00:50:54.600 --> 00:50:57.300
<00:50:54.600>Let's <00:50:54.833>say <00:50:55.066>they <00:50:55.299>don't <00:50:55.533>trust <00:50:55.766>I <00:50:56.000>don't

1037
00:50:57.300 --> 00:51:00.200
<00:50:57.300>know <00:50:57.427>if <00:50:57.554>trust <00:50:57.681>is <00:50:57.809>the <00:50:57.936>word <00:50:58.063>but <00:50:58.190>it's <00:50:58.318>like <00:50:58.445>okay. <00:50:58.572>Yeah, <00:50:58.700>you

1038
00:51:00.200 --> 00:51:03.600
<00:51:00.200>develop <00:51:00.355>a <00:51:00.511>knife <00:51:00.666>got <00:51:00.822>another <00:51:00.977>Experts <00:51:01.133>of <00:51:01.288>security. <00:51:01.444>That's <00:51:01.600>my

1039
00:51:03.600 --> 00:51:06.900
<00:51:03.600>experience. <00:51:03.799>But <00:51:04.000>again, <00:51:04.200>I'm <00:51:04.400>just <00:51:04.600>talking <00:51:04.799>from <00:51:05.000>the

1040
00:51:06.900 --> 00:51:07.600
<00:51:06.900>side <00:51:07.529>that

1041
00:51:08.500 --> 00:51:11.500
<00:51:08.500>Most <00:51:08.733>of <00:51:08.966>our <00:51:09.200>customers <00:51:09.433>are <00:51:09.666>more <00:51:09.900>traditional.

1042
00:51:11.500 --> 00:51:13.600
<00:51:11.500>Maybe <00:51:11.700>you <00:51:11.900>are <00:51:12.100>more <00:51:12.300>you <00:51:12.500>know <00:51:12.700>in <00:51:12.900>a

1043
00:51:14.400 --> 00:51:18.000
<00:51:14.400>new <00:51:14.680>let's <00:51:14.960>say <00:51:15.240>Netflix <00:51:15.520>Amazon <00:51:15.800>this

1044
00:51:17.000 --> 00:51:18.500
new

1045
00:51:20.200 --> 00:51:23.800
<00:51:20.200>or <00:51:20.480>yeah <00:51:20.759>mother <00:51:21.040>Enterprises, <00:51:21.319>then <00:51:21.600>probably

1046
00:51:23.800 --> 00:51:26.400
<00:51:23.800>they <00:51:23.975>have <00:51:24.150>what <00:51:24.325>you <00:51:24.500>said <00:51:24.675>that <00:51:24.850>the <00:51:25.025>developers <00:51:25.200>are

1047
00:51:26.400 --> 00:51:29.200
<00:51:26.400>also <00:51:26.633>involved <00:51:26.866>or <00:51:27.100>needs <00:51:27.333>to <00:51:27.566>be <00:51:27.800>aware

1048
00:51:29.200 --> 00:51:32.200
<00:51:29.200>of <00:51:29.399>the <00:51:29.600>security <00:51:29.799>concerns <00:51:30.000>because <00:51:30.200>the <00:51:30.399>very <00:51:30.600>end.

1049
00:51:33.200 --> 00:51:36.800
<00:51:33.200>This <00:51:33.327>last <00:51:33.454>example <00:51:33.581>as <00:51:33.709>a <00:51:33.836>developers. <00:51:33.963>We <00:51:34.090>need <00:51:34.218>to <00:51:34.345>know <00:51:34.472>that <00:51:34.600>there

1050
00:51:36.800 --> 00:51:39.300
<00:51:36.800>will <00:51:37.000>be <00:51:37.200>no <00:51:37.400>login <00:51:37.600>and <00:51:37.800>password <00:51:38.000>for <00:51:38.200>accessing

1051
00:51:39.300 --> 00:51:42.900
<00:51:39.300>the <00:51:39.416>database <00:51:39.533>you <00:51:39.650>need <00:51:39.766>to <00:51:39.883>do <00:51:40.000>a <00:51:40.116>you <00:51:40.233>need <00:51:40.350>to <00:51:40.466>access <00:51:40.583>using <00:51:40.700>both

1052
00:51:42.900 --> 00:51:45.200
<00:51:42.900>API <00:51:43.133>right <00:51:43.366>so <00:51:43.600>you <00:51:43.833>again <00:51:44.066>you <00:51:44.300>need

1053
00:51:45.200 --> 00:51:45.300
<00:51:45.200>to <00:51:45.290>know.

1054
00:51:46.700 --> 00:51:48.500
<00:51:46.700>This <00:51:46.875>kind <00:51:47.049>of <00:51:47.225>things <00:51:47.399>or <00:51:47.575>this <00:51:47.750>kind <00:51:47.924>of <00:51:48.100>decisions.

1055
00:51:49.400 --> 00:51:52.200
<00:51:49.400>Makes <00:51:49.600>sense. <00:51:49.800>Yeah, <00:51:50.000>it's <00:51:50.200>probably <00:51:50.400>difficult <00:51:50.600>more <00:51:50.800>difficult

1056
00:51:52.200 --> 00:51:55.400
<00:51:52.200>the <00:51:52.375>bigger <00:51:52.549>and <00:51:52.725>the <00:51:52.899>more <00:51:53.075>Legacy <00:51:53.250>the <00:51:53.424>organization <00:51:53.600>has.

1057
00:51:56.100 --> 00:52:00.000
<00:51:56.100>Make <00:51:56.299>sense. <00:51:56.500>Awesome <00:51:56.700>Benedict. <00:51:56.900>How's <00:51:57.100>the <00:51:57.299>community <00:51:57.500>questions

1058
00:51:59.500 --> 00:52:02.100
<00:51:59.500>looking? <00:51:59.966>Yeah. <00:52:00.433>We <00:52:00.900>got

1059
00:52:02.100 --> 00:52:05.200
<00:52:02.100>some <00:52:02.255>questions <00:52:02.411>from <00:52:02.566>the <00:52:02.722>community <00:52:02.877>side <00:52:03.033>as <00:52:03.188>well. <00:52:03.344>So <00:52:03.500>if

1060
00:52:05.200 --> 00:52:08.400
<00:52:05.200>you're <00:52:05.355>ready <00:52:05.511>Alex, <00:52:05.666>I <00:52:05.822>would <00:52:05.977>start <00:52:06.133>with <00:52:06.288>the <00:52:06.444>first <00:52:06.600>one.

1061
00:52:08.400 --> 00:52:11.600
<00:52:08.400>Have <00:52:08.555>you <00:52:08.711>heard <00:52:08.866>of <00:52:09.022>any <00:52:09.177>way <00:52:09.333>to <00:52:09.488>integrate <00:52:09.644>ESO <00:52:09.800>with

1062
00:52:11.600 --> 00:52:12.800
<00:52:11.600>sealed <00:52:12.680>secrets?

1063
00:52:14.200 --> 00:52:16.500
<00:52:14.200>Yes. <00:52:14.899>Oh, <00:52:15.600>no.

1064
00:52:17.400 --> 00:52:21.100
<00:52:17.400>No, <00:52:17.680>and <00:52:17.960>no <00:52:18.240>idea <00:52:18.520>for <00:52:18.800>now.

1065
00:52:20.100 --> 00:52:23.500
<00:52:20.100>No <00:52:20.450>good. <00:52:20.799>Sorry <00:52:21.150>short <00:52:21.500>answer.

1066
00:52:23.500 --> 00:52:26.400
<00:52:23.500>No <00:52:23.733>and <00:52:23.966>that <00:52:24.200>we <00:52:24.433>got <00:52:24.666>another <00:52:24.900>question.

1067
00:52:26.400 --> 00:52:30.000
<00:52:26.400>What <00:52:26.633>is <00:52:26.866>the <00:52:27.100>preference <00:52:27.333>for <00:52:27.566>Secrets <00:52:27.800>Management

1068
00:52:29.300 --> 00:52:33.200
<00:52:29.300>in <00:52:29.650>large <00:52:30.000>organization <00:52:30.350>centralized <00:52:30.700>secret

1069
00:52:32.200 --> 00:52:35.200
<00:52:32.200>management. <00:52:32.549>So <00:52:32.899>a <00:52:33.250>single <00:52:33.600>store

1070
00:52:35.200 --> 00:52:39.000
<00:52:35.200>for <00:52:35.355>the <00:52:35.511>whole <00:52:35.666>thing <00:52:35.822>or <00:52:35.977>distributed <00:52:36.133>so <00:52:36.288>each <00:52:36.444>team <00:52:36.600>manages

1071
00:52:38.500 --> 00:52:40.500
<00:52:38.500>their <00:52:39.200>own <00:52:39.900>secrets.

1072
00:52:41.600 --> 00:52:44.300
<00:52:41.600>Yet <00:52:41.755>I <00:52:41.911>would <00:52:42.066>say <00:52:42.222>that <00:52:42.377>this <00:52:42.533>depend <00:52:42.688>on <00:52:42.844>how <00:52:43.000>much

1073
00:52:44.300 --> 00:52:45.600
<00:52:44.300>your <00:52:44.690>is <00:52:45.080>your <00:52:45.470>organization.

1074
00:52:46.500 --> 00:52:49.000
<00:52:46.500>So <00:52:46.655>if <00:52:46.811>you've <00:52:46.966>got <00:52:47.122>a <00:52:47.277>matter <00:52:47.433>organization <00:52:47.588>with <00:52:47.744>you <00:52:47.900>know

1075
00:52:49.200 --> 00:52:52.400
<00:52:49.200>with <00:52:49.316>the <00:52:49.433>knowledge <00:52:49.549>that <00:52:49.666>is <00:52:49.783>to <00:52:49.899>spread <00:52:50.016>across <00:52:50.133>the <00:52:50.250>teams, <00:52:50.366>then <00:52:50.483>you <00:52:50.600>can

1076
00:52:52.400 --> 00:52:55.300
<00:52:52.400>just <00:52:52.575>do <00:52:52.750>distributed <00:52:52.925>because <00:52:53.100>it <00:52:53.275>has <00:52:53.450>some <00:52:53.625>advantages <00:52:53.800>that

1077
00:52:55.300 --> 00:52:59.000
<00:52:55.300>every <00:52:55.500>team <00:52:55.700>knows <00:52:55.900>exactly <00:52:56.100>how <00:52:56.300>to <00:52:56.500>protect <00:52:56.700>but

1078
00:52:58.100 --> 00:53:01.200
<00:52:58.100>like <00:52:58.566>we <00:52:59.033>were <00:52:59.500>talking

1079
00:53:01.200 --> 00:53:04.400
<00:53:01.200>with <00:53:01.355>Mark <00:53:01.511>depending <00:53:01.666>on <00:53:01.822>how <00:53:01.977>much <00:53:02.133>is <00:53:02.288>your <00:53:02.444>organization <00:53:02.600>how

1080
00:53:04.400 --> 00:53:07.400
<00:53:04.400>let's <00:53:04.633>see <00:53:04.866>model <00:53:05.100>is <00:53:05.333>your <00:53:05.566>organization <00:53:05.800>you

1081
00:53:07.400 --> 00:53:10.400
<00:53:07.400>might <00:53:07.555>prefer <00:53:07.711>a <00:53:07.866>central <00:53:08.022>place <00:53:08.177>where <00:53:08.333>you <00:53:08.488>know, <00:53:08.644>it's <00:53:08.800>like

1082
00:53:10.400 --> 00:53:14.100
<00:53:10.400>okay, <00:53:10.516>we've <00:53:10.633>got <00:53:10.750>the <00:53:10.866>security <00:53:10.983>team <00:53:11.100>that <00:53:11.216>takes <00:53:11.333>care <00:53:11.450>of <00:53:11.566>all <00:53:11.683>these <00:53:11.800>store

1083
00:53:13.100 --> 00:53:16.400
<00:53:13.100>or <00:53:13.450>Central <00:53:13.799>store <00:53:14.150>and <00:53:14.500>then

1084
00:53:16.400 --> 00:53:19.200
<00:53:16.400>they <00:53:16.575>just <00:53:16.750>provides <00:53:16.925>you <00:53:17.100>a <00:53:17.275>documentary <00:53:17.450>said, <00:53:17.625>okay, <00:53:17.800>you

1085
00:53:19.200 --> 00:53:22.100
<00:53:19.200>want <00:53:19.355>to <00:53:19.511>get <00:53:19.666>a <00:53:19.822>secret <00:53:19.977>do <00:53:20.133>this <00:53:20.288>steps <00:53:20.444>and <00:53:20.600>you

1086
00:53:22.100 --> 00:53:26.700
<00:53:22.100>will <00:53:22.187>get <00:53:22.275>sick <00:53:22.362>and <00:53:22.450>that's <00:53:22.537>all <00:53:22.625>that's <00:53:22.712>all <00:53:22.799>the <00:53:22.887>things <00:53:22.975>that <00:53:23.062>you <00:53:23.150>need <00:53:23.237>to <00:53:23.325>know, <00:53:23.412>right? <00:53:23.500>I

1087
00:53:25.700 --> 00:53:27.900
<00:53:25.700>know <00:53:25.933>that <00:53:26.166>most <00:53:26.399>of <00:53:26.633>the <00:53:26.866>time <00:53:27.100>it's

1088
00:53:28.100 --> 00:53:31.500
<00:53:28.100>Depends <00:53:28.380>depends <00:53:28.660>is <00:53:28.940>the <00:53:29.220>hands <00:53:29.500>is

1089
00:53:31.500 --> 00:53:34.500
<00:53:31.500>the <00:53:31.627>answer. <00:53:31.754>Yeah. <00:53:31.881>It <00:53:32.009>depends <00:53:32.136>at <00:53:32.263>the <00:53:32.390>end <00:53:32.518>how <00:53:32.645>much <00:53:32.772>there <00:53:32.900>is

1090
00:53:34.500 --> 00:53:36.500
<00:53:34.500>your <00:53:34.655>organization <00:53:34.811>that <00:53:34.966>you <00:53:35.122>will <00:53:35.277>make <00:53:35.433>one <00:53:35.588>thing <00:53:35.744>or <00:53:35.900>another?

1091
00:53:38.400 --> 00:53:41.400
<00:53:38.400>It <00:53:38.575>depends <00:53:38.750>on <00:53:38.925>the <00:53:39.100>situation. <00:53:39.275>That's <00:53:39.450>an <00:53:39.625>answer. <00:53:39.800>Yeah,

1092
00:53:41.400 --> 00:53:48.200
<00:53:41.400>a <00:53:41.680>lot <00:53:41.960>of <00:53:42.240>that. <00:53:42.520>Yeah. <00:53:42.800>I

1093
00:53:46.200 --> 00:53:49.800
<00:53:46.200>mean, <00:53:46.549>it's <00:53:46.899>not <00:53:47.250>like <00:53:47.600>do

1094
00:53:49.800 --> 00:53:52.400
<00:53:49.800>you <00:53:50.000>use <00:53:50.200>any <00:53:50.400>or <00:53:50.600>a <00:53:50.800>four? <00:53:51.000>Yeah, <00:53:51.200>then

1095
00:53:52.400 --> 00:53:55.200
<00:53:52.400>maybe <00:53:52.555>easier <00:53:52.711>but <00:53:52.866>if <00:53:53.022>they <00:53:53.177>say <00:53:53.333>can <00:53:53.488>I <00:53:53.644>use <00:53:53.800>a

1096
00:53:55.200 --> 00:53:58.200
<00:53:55.200>four <00:53:55.327>or <00:53:55.454>a <00:53:55.581>while <00:53:55.709>it's <00:53:55.836>like <00:53:55.963>what <00:53:56.090>I <00:53:56.218>do <00:53:56.345>while <00:53:56.472>he's <00:53:56.600>like,

1097
00:53:58.200 --> 00:53:59.300
<00:53:58.200>okay. <00:53:59.190>Yeah.

1098
00:54:01.400 --> 00:54:04.400
<00:54:01.400>No, <00:54:01.555>Alex <00:54:01.711>cycle <00:54:01.866>so <00:54:02.022>much <00:54:02.177>for <00:54:02.333>the <00:54:02.488>answer. <00:54:02.644>We <00:54:02.800>got

1099
00:54:04.400 --> 00:54:04.800
<00:54:04.400>another <00:54:04.760>question.

1100
00:54:05.900 --> 00:54:08.800
<00:54:05.900>How <00:54:06.133>would <00:54:06.366>you <00:54:06.600>manage <00:54:06.833>developers <00:54:07.066>programming <00:54:07.300>locally

1101
00:54:08.800 --> 00:54:12.000
<00:54:08.800>and <00:54:09.000>having <00:54:09.200>environments <00:54:09.400>with <00:54:09.600>access <00:54:09.800>to <00:54:10.000>apis <00:54:10.200>and

1102
00:54:11.500 --> 00:54:14.600
<00:54:11.500>every <00:54:11.780>developer <00:54:12.060>piece <00:54:12.340>on <00:54:12.620>every <00:54:12.900>developer

1103
00:54:14.600 --> 00:54:15.000
PC?

1104
00:54:18.200 --> 00:54:21.100
<00:54:18.200>Well, <00:54:18.480>yeah, <00:54:18.759>that's <00:54:19.040>I <00:54:19.319>would <00:54:19.600>say

1105
00:54:21.100 --> 00:54:25.400
<00:54:21.100>that <00:54:21.380>now <00:54:21.660>with <00:54:21.940>container <00:54:22.220>Technologies. <00:54:22.500>I

1106
00:54:24.400 --> 00:54:27.000
<00:54:24.400>would <00:54:24.633>say <00:54:24.866>that <00:54:25.100>it's <00:54:25.333>more <00:54:25.566>or <00:54:25.800>less

1107
00:54:27.400 --> 00:54:30.600
<00:54:27.400>easy <00:54:27.540>to <00:54:27.680>manage. <00:54:27.820>Okay, <00:54:27.960>because <00:54:28.100>you <00:54:28.240>can <00:54:28.380>just <00:54:28.520>start <00:54:28.660>containers <00:54:28.800>with

1108
00:54:30.600 --> 00:54:33.400
<00:54:30.600>the <00:54:30.833>aps <00:54:31.066>that <00:54:31.299>you <00:54:31.533>require. <00:54:31.766>I <00:54:32.000>guess

1109
00:54:33.400 --> 00:54:36.300
<00:54:33.400>it <00:54:33.555>doesn't <00:54:33.711>that's <00:54:33.866>the <00:54:34.022>question <00:54:34.177>right <00:54:34.333>so <00:54:34.488>you <00:54:34.644>can <00:54:34.800>put

1110
00:54:36.300 --> 00:54:39.500
<00:54:36.300>a <00:54:36.500>strap <00:54:36.700>some <00:54:36.900>kind <00:54:37.100>of <00:54:37.300>service <00:54:37.500>virtualization <00:54:37.700>systems

1111
00:54:39.500 --> 00:54:43.700
<00:54:39.500>that <00:54:39.850>mocks <00:54:40.200>apis. <00:54:40.550>So <00:54:40.900>I

1112
00:54:42.700 --> 00:54:45.200
<00:54:42.700>will <00:54:43.166>just <00:54:43.633>relay <00:54:44.100>on

1113
00:54:45.200 --> 00:54:49.000
<00:54:45.200>things <00:54:45.316>like <00:54:45.433>that <00:54:45.549>like <00:54:45.666>service <00:54:45.783>virtualization, <00:54:45.899>like <00:54:46.016>for <00:54:46.133>example, <00:54:46.250>hover <00:54:46.366>flight <00:54:46.483>or <00:54:46.600>or

1114
00:54:48.700 --> 00:54:51.900
<00:54:48.700>wiremod <00:54:49.049>Technologies, <00:54:49.399>like <00:54:49.750>these <00:54:50.100>helps

1115
00:54:51.900 --> 00:54:55.300
<00:54:51.900>you <00:54:52.250>to <00:54:52.600>access <00:54:52.950>apis <00:54:53.300>without

1116
00:54:54.300 --> 00:54:57.600
<00:54:54.300>having <00:54:54.580>to <00:54:54.860>have <00:54:55.140>installed <00:54:55.420>on <00:54:55.700>your

1117
00:54:57.600 --> 00:55:00.800
<00:54:57.600>local <00:54:57.799>machine. <00:54:58.000>I <00:54:58.200>will <00:54:58.400>rely <00:54:58.600>on <00:54:58.799>this <00:54:59.000>in

1118
00:55:00.800 --> 00:55:01.600
<00:55:00.800>the <00:55:01.040>case <00:55:01.280>of <00:55:01.520>Secrets.

1119
00:55:02.100 --> 00:55:02.800
in

1120
00:55:04.600 --> 00:55:07.300
<00:55:04.600>The <00:55:04.740>case <00:55:04.880>we <00:55:05.020>just <00:55:05.160>having <00:55:05.299>some <00:55:05.440>kind <00:55:05.580>of <00:55:05.720>profiles <00:55:05.860>where <00:55:06.000>I

1121
00:55:07.300 --> 00:55:10.300
<00:55:07.300>got <00:55:07.475>the <00:55:07.650>debt <00:55:07.825>profile <00:55:08.000>which <00:55:08.175>just <00:55:08.350>gets <00:55:08.525>nothing <00:55:08.700>just

1122
00:55:10.300 --> 00:55:13.100
<00:55:10.300>you <00:55:10.427>know, <00:55:10.554>set <00:55:10.681>the <00:55:10.809>login <00:55:10.936>and <00:55:11.063>password <00:55:11.190>adminantly <00:55:11.318>and <00:55:11.445>then <00:55:11.572>I've <00:55:11.700>got

1123
00:55:13.100 --> 00:55:16.000
<00:55:13.100>another <00:55:13.255>profile <00:55:13.411>which <00:55:13.566>is <00:55:13.722>the <00:55:13.877>production <00:55:14.033>one <00:55:14.188>which <00:55:14.344>puts <00:55:14.500>up

1124
00:55:16.600 --> 00:55:19.400
<00:55:16.600>everything. <00:55:16.833>I <00:55:17.066>will <00:55:17.299>just <00:55:17.533>go <00:55:17.766>to <00:55:18.000>this

1125
00:55:19.400 --> 00:55:22.400
<00:55:19.400>situation <00:55:19.516>in <00:55:19.633>the <00:55:19.750>case <00:55:19.866>of <00:55:19.983>Secrets <00:55:20.100>because <00:55:20.216>at <00:55:20.333>the <00:55:20.450>end <00:55:20.566>as <00:55:20.683>a <00:55:20.800>developers

1126
00:55:22.400 --> 00:55:23.400
<00:55:22.400>you <00:55:22.625>want <00:55:22.850>to <00:55:23.075>just <00:55:23.300>be

1127
00:55:24.600 --> 00:55:25.000
fast

1128
00:55:29.200 --> 00:55:33.300
<00:55:29.200>on <00:55:29.375>just <00:55:29.549>try <00:55:29.725>to <00:55:29.899>avoid <00:55:30.075>all <00:55:30.250>these <00:55:30.424>secrets <00:55:30.600>management

1129
00:55:33.300 --> 00:55:35.700
<00:55:33.300>and <00:55:33.580>configurations <00:55:33.860>and <00:55:34.140>things <00:55:34.420>like <00:55:34.700>that.

1130
00:55:38.400 --> 00:55:41.500
<00:55:38.400>Red, <00:55:38.555>thank <00:55:38.711>you <00:55:38.866>for <00:55:39.022>this <00:55:39.177>answers. <00:55:39.333>Well, <00:55:39.488>we <00:55:39.644>got <00:55:39.800>another

1131
00:55:41.500 --> 00:55:44.300
<00:55:41.500>question. <00:55:41.733>How <00:55:41.966>can <00:55:42.200>we <00:55:42.433>use <00:55:42.666>Vault <00:55:42.900>to

1132
00:55:44.300 --> 00:55:47.600
<00:55:44.300>store <00:55:44.500>and <00:55:44.700>retrieve <00:55:44.900>secrets <00:55:45.100>from <00:55:45.300>a <00:55:45.500>DOT <00:55:45.700>EnV

1133
00:55:47.600 --> 00:55:49.400
<00:55:47.600>file <00:55:48.299>in <00:55:49.000>kubernetes?

1134
00:55:52.200 --> 00:55:53.800
<00:55:52.200>Ah, <00:55:52.899>but <00:55:53.600>yeah.

1135
00:55:55.700 --> 00:55:58.300
<00:55:55.700>What <00:55:55.980>got <00:55:56.259>them <00:55:56.540>be? <00:55:56.819>Yeah, <00:55:57.100>but

1136
00:55:58.300 --> 00:56:03.100
<00:55:58.300>then <00:55:58.427>yeah <00:55:58.554>because <00:55:58.681>at <00:55:58.809>the <00:55:58.936>end <00:55:59.063>of <00:55:59.190>that <00:55:59.318>am <00:55:59.445>be <00:55:59.572>file <00:55:59.700>it

1137
00:56:01.100 --> 00:56:04.300
<00:56:01.100>Justin <00:56:01.380>Bieber <00:56:01.660>and <00:56:01.940>prayers. <00:56:02.220>Yeah, <00:56:02.500>what

1138
00:56:04.300 --> 00:56:07.800
<00:56:04.300>you <00:56:04.440>can <00:56:04.580>do <00:56:04.720>with <00:56:04.860>both <00:56:05.000>is <00:56:05.140>use <00:56:05.280>a <00:56:05.420>process <00:56:05.560>or <00:56:05.700>a

1139
00:56:07.800 --> 00:56:10.500
<00:56:07.800>system <00:56:08.080>like <00:56:08.360>external <00:56:08.640>Secrets <00:56:08.920>project <00:56:09.200>that

1140
00:56:10.500 --> 00:56:14.500
<00:56:10.500>I <00:56:10.675>show <00:56:10.850>you <00:56:11.025>but <00:56:11.200>you <00:56:11.375>can <00:56:11.550>just <00:56:11.725>consume <00:56:11.900>the

1141
00:56:14.500 --> 00:56:17.600
<00:56:14.500>secrets <00:56:14.655>and <00:56:14.811>store <00:56:14.966>it <00:56:15.122>as <00:56:15.277>a <00:56:15.433>kubernetes <00:56:15.588>secret <00:56:15.744>and <00:56:15.900>then

1142
00:56:17.600 --> 00:56:20.700
<00:56:17.600>what <00:56:17.727>you <00:56:17.854>can <00:56:17.981>do <00:56:18.109>is <00:56:18.236>Mount <00:56:18.363>these <00:56:18.490>secrets <00:56:18.618>inside <00:56:18.745>the <00:56:18.872>pot <00:56:19.000>and

1143
00:56:20.700 --> 00:56:23.400
<00:56:20.700>if <00:56:20.807>you've <00:56:20.915>got <00:56:21.023>there <00:56:21.130>that <00:56:21.238>and <00:56:21.346>then <00:56:21.453>you <00:56:21.561>can <00:56:21.669>read <00:56:21.776>from <00:56:21.884>there, <00:56:21.992>but <00:56:22.100>you

1144
00:56:23.400 --> 00:56:26.800
<00:56:23.400>need <00:56:23.575>like <00:56:23.750>let's <00:56:23.925>say <00:56:24.100>you <00:56:24.275>need <00:56:24.450>Asian <00:56:24.625>that <00:56:24.800>just

1145
00:56:26.800 --> 00:56:30.400
<00:56:26.800>translate <00:56:27.500>the <00:56:28.200>secrets

1146
00:56:30.400 --> 00:56:32.800
<00:56:30.400>from <00:56:30.600>one <00:56:30.800>place <00:56:31.000>to <00:56:31.200>the <00:56:31.400>Cuban <00:56:31.600>in <00:56:31.800>this

1147
00:56:33.800 --> 00:56:36.200
<00:56:33.800>That <00:56:34.150>objects <00:56:34.500>right <00:56:34.850>in <00:56:35.200>the

1148
00:56:36.200 --> 00:56:39.600
<00:56:36.200>case <00:56:36.316>of <00:56:36.433>I've <00:56:36.549>showed <00:56:36.666>you. <00:56:36.783>It's <00:56:36.899>just <00:56:37.016>an <00:56:37.133>arrest <00:56:37.250>API <00:56:37.366>that <00:56:37.483>just <00:56:37.600>communicates

1149
00:56:39.600 --> 00:56:42.300
<00:56:39.600>with <00:56:39.727>both. <00:56:39.854>If <00:56:39.981>you <00:56:40.109>want <00:56:40.236>to <00:56:40.363>do <00:56:40.490>this <00:56:40.618>middle <00:56:40.745>step. <00:56:40.872>Then <00:56:41.000>you

1150
00:56:42.300 --> 00:56:46.600
<00:56:42.300>need <00:56:42.475>this <00:56:42.650>middle <00:56:42.825>software <00:56:43.000>that <00:56:43.175>reads <00:56:43.350>and <00:56:43.525>transforms <00:56:43.700>the

1151
00:56:46.600 --> 00:56:51.300
<00:56:46.600>Bold <00:56:46.950>secret <00:56:47.299>into <00:56:47.650>kubernetes <00:56:48.000>object.

1152
00:56:50.300 --> 00:56:53.400
<00:56:50.300>Yeah. <00:56:50.650>It's <00:56:51.000>it's <00:56:51.350>possible <00:56:51.700>to

1153
00:56:53.400 --> 00:56:56.800
<00:56:53.400>do <00:56:53.555>it <00:56:53.711>like <00:56:53.866>with <00:56:54.022>the <00:56:54.177>project <00:56:54.333>that <00:56:54.488>I <00:56:54.644>shared <00:56:54.800>with

1154
00:56:56.800 --> 00:56:57.400
<00:56:56.800>you <00:56:57.340>before.

1155
00:56:58.400 --> 00:57:01.200
<00:56:58.400>Right. <00:56:58.575>Thank <00:56:58.750>you <00:56:58.925>and <00:56:59.100>time <00:56:59.275>for <00:56:59.450>one <00:56:59.625>more <00:56:59.800>question.

1156
00:57:01.200 --> 00:57:03.400
<00:57:01.200>Maybe <00:57:01.375>Mark. <00:57:01.549>Do <00:57:01.725>you <00:57:01.899>have <00:57:02.075>something <00:57:02.250>on <00:57:02.424>your <00:57:02.600>mind?

1157
00:57:04.400 --> 00:57:07.600
<00:57:04.400>Yeah, <00:57:04.540>maybe <00:57:04.680>in <00:57:04.820>just <00:57:04.960>a <00:57:05.100>few <00:57:05.240>words <00:57:05.380>Alex. <00:57:05.520>I'm <00:57:05.660>curious <00:57:05.800>about

1158
00:57:07.600 --> 00:57:10.400
<00:57:07.600>the <00:57:07.950>development <00:57:08.299>developer <00:57:08.650>experience <00:57:09.000>role.

1159
00:57:10.400 --> 00:57:13.500
<00:57:10.400>Maybe <00:57:10.527>not <00:57:10.654>everybody <00:57:10.781>knows <00:57:10.909>about <00:57:11.036>it <00:57:11.163>yet. <00:57:11.290>I'm <00:57:11.418>sure <00:57:11.545>more <00:57:11.672>companies <00:57:11.800>will

1160
00:57:13.500 --> 00:57:16.700
<00:57:13.500>start <00:57:13.700>to <00:57:13.900>adopt <00:57:14.100>this <00:57:14.300>function. <00:57:14.500>But <00:57:14.700>how <00:57:14.900>would

1161
00:57:16.700 --> 00:57:17.400
<00:57:16.700>you <00:57:16.857>describe <00:57:17.015>it <00:57:17.172>and <00:57:17.330>maybe

1162
00:57:18.100 --> 00:57:21.400
<00:57:18.100>who <00:57:18.240>do <00:57:18.380>you <00:57:18.520>think <00:57:18.660>is <00:57:18.799>the <00:57:18.940>right <00:57:19.080>profile <00:57:19.220>to <00:57:19.360>to <00:57:19.500>be

1163
00:57:21.400 --> 00:57:24.400
<00:57:21.400>part <00:57:21.507>of <00:57:21.615>the <00:57:21.723>developer <00:57:21.830>experience <00:57:21.938>team <00:57:22.046>as <00:57:22.153>opposed <00:57:22.261>to <00:57:22.369>being <00:57:22.476>a <00:57:22.584>developer? <00:57:22.692>Maybe <00:57:22.800>this

1164
00:57:24.400 --> 00:57:26.200
<00:57:24.400>could <00:57:24.600>be <00:57:24.800>interesting <00:57:25.000>for <00:57:25.200>some <00:57:25.400>of <00:57:25.600>the <00:57:25.800>viewers.

1165
00:57:27.100 --> 00:57:30.500
<00:57:27.100>Yeah, <00:57:27.227>we <00:57:27.354>said <00:57:27.481>that <00:57:27.609>the <00:57:27.736>best <00:57:27.863>Rollies <00:57:27.990>are <00:57:28.118>because <00:57:28.245>of <00:57:28.372>Dennis <00:57:28.500>also

1166
00:57:30.500 --> 00:57:33.300
<00:57:30.500>like <00:57:30.655>a <00:57:30.811>devel <00:57:30.966>role. <00:57:31.122>So <00:57:31.277>if <00:57:31.433>you're <00:57:31.588>a <00:57:31.744>developer <00:57:31.900>that

1167
00:57:33.300 --> 00:57:37.400
<00:57:33.300>you're <00:57:33.500>just <00:57:33.700>targeting <00:57:33.900>to <00:57:34.100>the <00:57:34.300>Broadband <00:57:34.500>developer <00:57:34.700>experiences

1168
00:57:36.400 --> 00:57:39.200
<00:57:36.400>also <00:57:36.600>a <00:57:36.800>good <00:57:37.000>you <00:57:37.200>know, <00:57:37.400>it's <00:57:37.600>like <00:57:37.800>the

1169
00:57:39.200 --> 00:57:41.600
<00:57:39.200>path <00:57:39.327>that <00:57:39.454>you <00:57:39.581>should <00:57:39.709>follow <00:57:39.836>or <00:57:39.963>I <00:57:40.090>think <00:57:40.218>that <00:57:40.345>you <00:57:40.472>should <00:57:40.600>follow.

1170
00:57:41.900 --> 00:57:44.400
<00:57:41.900>And <00:57:42.180>basically <00:57:42.460>it's <00:57:42.740>like <00:57:43.020>user <00:57:43.300>experience,

1171
00:57:44.400 --> 00:57:47.400
<00:57:44.400>but <00:57:44.600>for <00:57:44.800>the <00:57:45.000>developers, <00:57:45.200>it's <00:57:45.400>the <00:57:45.600>same <00:57:45.800>concept.

1172
00:57:47.400 --> 00:57:50.400
<00:57:47.400>So <00:57:47.555>user <00:57:47.711>experience <00:57:47.866>checking <00:57:48.022>that <00:57:48.177>they're <00:57:48.333>using <00:57:48.488>interface. <00:57:48.644>It's <00:57:48.800>nice

1173
00:57:50.400 --> 00:57:53.400
<00:57:50.400>that <00:57:50.575>everyone <00:57:50.750>feel <00:57:50.925>comfortable. <00:57:51.100>It's <00:57:51.275>you <00:57:51.450>know <00:57:51.625>easy <00:57:51.800>to

1174
00:57:53.400 --> 00:57:56.300
<00:57:53.400>understand. <00:57:53.600>What <00:57:53.800>is <00:57:54.000>the <00:57:54.200>buttons <00:57:54.400>then <00:57:54.600>we <00:57:54.800>developer

1175
00:57:56.300 --> 00:57:59.900
<00:57:56.300>experience <00:57:56.427>is <00:57:56.554>the <00:57:56.681>same <00:57:56.809>but <00:57:56.936>for <00:57:57.063>developers, <00:57:57.190>so <00:57:57.318>for <00:57:57.445>example <00:57:57.572>in <00:57:57.700>the

1176
00:57:59.900 --> 00:58:02.200
<00:57:59.900>case <00:58:00.133>of <00:58:00.366>I <00:58:00.600>don't <00:58:00.833>know <00:58:01.066>for <00:58:01.300>example

1177
00:58:02.200 --> 00:58:05.300
<00:58:02.200>istio, <00:58:02.327>right <00:58:02.454>but <00:58:02.581>it's <00:58:02.709>just <00:58:02.836>a <00:58:02.963>matter <00:58:03.090>of <00:58:03.218>Eastern <00:58:03.345>is <00:58:03.472>here <00:58:03.600>and

1178
00:58:05.300 --> 00:58:08.300
<00:58:05.300>just <00:58:05.440>say, <00:58:05.580>oh <00:58:05.720>we <00:58:05.860>are <00:58:06.000>for <00:58:06.140>example, <00:58:06.280>I <00:58:06.420>use <00:58:06.560>fiction <00:58:06.700>locks

1179
00:58:08.300 --> 00:58:11.300
<00:58:08.300>right <00:58:08.427>and <00:58:08.554>say <00:58:08.681>oh <00:58:08.809>look, <00:58:08.936>I'm <00:58:09.063>just <00:58:09.190>going <00:58:09.318>to <00:58:09.445>deploy <00:58:09.572>an <00:58:09.700>example

1180
00:58:11.300 --> 00:58:14.400
<00:58:11.300>on <00:58:11.427>Easter. <00:58:11.554>I'm <00:58:11.681>just <00:58:11.809>going <00:58:11.936>to <00:58:12.063>do <00:58:12.190>this. <00:58:12.318>This <00:58:12.445>is <00:58:12.572>you <00:58:12.700>run

1181
00:58:14.400 --> 00:58:17.700
<00:58:14.400>all <00:58:14.540>the <00:58:14.680>step <00:58:14.820>and <00:58:14.960>then <00:58:15.100>you <00:58:15.240>ask <00:58:15.380>questions <00:58:15.520>like <00:58:15.660>will <00:58:15.800>we

1182
00:58:18.700 --> 00:58:22.400
<00:58:18.700>Collapse <00:58:18.899>these <00:58:19.100>two <00:58:19.299>steps <00:58:19.500>into <00:58:19.700>one <00:58:19.899>or <00:58:20.100>maybe

1183
00:58:21.400 --> 00:58:25.000
<00:58:21.400>not <00:58:21.680>or <00:58:21.960>we <00:58:22.240>could <00:58:22.520>just <00:58:22.800>this

1184
00:58:24.200 --> 00:58:27.500
<00:58:24.200>three <00:58:24.327>steps <00:58:24.454>that <00:58:24.581>needs <00:58:24.709>to <00:58:24.836>be <00:58:24.963>done <00:58:25.090>in <00:58:25.218>this <00:58:25.345>way <00:58:25.472>or <00:58:25.600>maybe

1185
00:58:27.500 --> 00:58:30.100
<00:58:27.500>will <00:58:27.655>be <00:58:27.811>better <00:58:27.966>to <00:58:28.122>the <00:58:28.277>third <00:58:28.433>one <00:58:28.588>here <00:58:28.744>do <00:58:28.900>it

1186
00:58:30.100 --> 00:58:33.600
<00:58:30.100>first <00:58:30.216>because <00:58:30.333>it's <00:58:30.450>more <00:58:30.566>natural <00:58:30.683>things <00:58:30.799>like <00:58:30.916>that. <00:58:31.033>Right? <00:58:31.150>It's <00:58:31.266>just <00:58:31.383>making <00:58:31.500>that

1187
00:58:33.600 --> 00:58:36.700
<00:58:33.600>when <00:58:33.799>a <00:58:34.000>developer <00:58:34.200>needs <00:58:34.400>to <00:58:34.600>use <00:58:34.799>a <00:58:35.000>tool

1188
00:58:36.700 --> 00:58:38.600
<00:58:36.700>it <00:58:37.049>feels <00:58:37.399>comfortable <00:58:37.750>with <00:58:38.100>it.

1189
00:58:39.600 --> 00:58:41.700
<00:58:39.600>Awesome. <00:58:39.755>Thank <00:58:39.911>you <00:58:40.066>Alex. <00:58:40.222>Thanks <00:58:40.377>for <00:58:40.533>the <00:58:40.688>answer. <00:58:40.844>Thank <00:58:41.000>you.

1190
00:58:43.100 --> 00:58:45.000
<00:58:43.100>Alex <00:58:43.275>thank <00:58:43.450>you <00:58:43.625>so <00:58:43.799>much <00:58:43.975>for <00:58:44.150>the <00:58:44.325>awesome <00:58:44.500>talk.

1191
00:58:46.500 --> 00:58:49.300
<00:58:46.500>And <00:58:46.700>since <00:58:46.900>you <00:58:47.100>already <00:58:47.300>a <00:58:47.500>regular <00:58:47.700>that <00:58:47.900>we

1192
00:58:49.300 --> 00:58:51.600
<00:58:49.300>are <00:58:49.427>developers <00:58:49.554>live. <00:58:49.681>I <00:58:49.809>think <00:58:49.936>it's <00:58:50.063>safe <00:58:50.190>to <00:58:50.318>say <00:58:50.445>see <00:58:50.572>you <00:58:50.700>soon.

1193
00:58:52.600 --> 00:58:54.700
<00:58:52.600>And <00:58:52.775>thank <00:58:52.950>you <00:58:53.125>very <00:58:53.299>much. <00:58:53.475>It's <00:58:53.650>always <00:58:53.825>a <00:58:54.000>pleasure.

1194
00:58:55.700 --> 00:58:57.000
<00:58:55.700>Yeah, <00:58:55.992>thanks <00:58:56.285>so <00:58:56.577>much. <00:58:56.870>I