WeAreDevelopers LIVE • Feb 12, 2024

Securing secrets in the GitOps Era

Storing plain-text Kubernetes secrets in Git exposes your entire infrastructure. How can you protect sensitive credentials without breaking automated deployment pipelines driven by Flux or ArgoCD?

Starting at 7:39 · Watch from the beginning

Securing secrets in the GitOps Era thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

6:14 min

Introduction to securing secrets in GitOps deployments

Alex Soto

Alex Soto · LIVE

3:42 min

Managing secrets and security in a GitOps model

Roberth Strand · LIVE

2:03 min

Additional resources on GitOps and Kubernetes secret management

Alex Soto

Alex Soto · LIVE

3:09 min

Injecting sensitive configuration values via Kubernetes secrets

Hannes Norbert Göring · LIVE

2:30 min

Handling passwords and certificates securely via Kubernetes secrets

Aurélie Vache

Aurélie Vache · World Congress 2026 Europe

4:29 min

Configuring a DevSecOps pipeline and Oversecured integration demo

Moataz Nabil

Moataz Nabil · LIVE

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Architecting Secure and Encrypted Microservices in K8s

Arushi Garg

Adobe

SDE-2
MV Shiva

Google

SWE

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Reviewing, Hosting, and Collaborating: what an agentic Git Forge looks like.

Nahas Mohammed

Entire

Senior Director
Abhi Singh

Entire

Solutions Engineer

The Developer's Guide to an Agentic Git Forge

Joseph Katsioloudes

Entire

Senior Developer Advocate

From Monolith to Phases: Restructuring Terraform Deployments That Work in Any Cloud

Naveen Kumar Kalapala

Infosys Ltd

Lead Cloud Engineer

Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

Rajani Ekunde

Identity company

Senior Software Engineer

Related videos

Securing Secrets in the GitOps era thumbnail

Securing Secrets in the GitOps era

LIVE · Apr 2023

Best Practices for Using GitHub Secrets thumbnail

Best Practices for Using GitHub Secrets

Marcel Lupo

LIVE · Sep 2024

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

World Congress · 2023

Stop Committing Your Secrets - GIt Hooks To The Rescue! thumbnail

Stop Committing Your Secrets - GIt Hooks To The Rescue!

Dwayne Mcdaniel

LIVE · Apr 2023

How to GitOps your cluster with Flux thumbnail

How to GitOps your cluster with Flux

LIVE · Apr 2023

GitOps: The past, present and future thumbnail

GitOps: The past, present and future

Roberth Strand

LIVE · Oct 2021

Related articles

DC

Daniel Cranney

The Overflow: 5 Security and Privacy Tools for Developers

We’re back again with another edition of the Overflow, where we share some of the best tools we’ve found from around the web that we just couldn’t cram into the already jam-packed editions of the D...

7 months ago

A laptop with a padlock chained around it

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

17 days ago

An image of a cube-shaped container with a ball of light inside of it

DC

Daniel Cranney

Building an Agentic Software Factory

Could your software be fully automated? That was the question put to the main stage audience at WeAreDevelopers North America by Entire CEO Thomas Dohmke and Factory CEO Matan Grinberg. While most ...

9 days ago

A website's UI with labels around for different AI agents, like code quality, security, backend, marketing and so on.

CH

Chris Heilmann

Stop Googling Git Commands. Start Actually Learning Git.

Every developer has been there. You’re mid-flow, about to push a feature branch, and you need to undo your last three commits without blowing up the remote history. So you do what you always do: yo...

6 months ago

The Git Skills homepage showing you quizzes and how-tos.

From learning to earning

Jobs that call for the skills explored in this talk.

about 2 months ago

Cloud Engineer (German)

Barcelona, Spain

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

about 2 months ago

DevOps Engineer

Oberkochen, Germany

Experienced Git Unix Linux

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Cloud SecOps Engineer - Storage

Expert €57k–84k Git Linux DevOps

Cybersecurity Engineer - Google Secops/Siem | Managed Services Operations

Cleveland, OH, United States

Experienced Splunk QRadar Github