{"id":247076,"date":"2025-12-09T11:02:02","date_gmt":"2025-12-09T10:02:02","guid":{"rendered":"https:\/\/blog.adesso-bc.com\/?p=247076"},"modified":"2025-12-10T11:30:41","modified_gmt":"2025-12-10T10:30:41","slug":"kubernetes-secret-kezeles-gyakorlati-megvalositas","status":"publish","type":"post","link":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/","title":{"rendered":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s"},"content":{"rendered":"\n<p>A nat\u00edv Kubernetes Secrets val\u00f3j\u00e1ban csak base64-encodolva van, nem titkos\u00edtva, ami komoly biztons\u00e1gi sebezhet\u0151s\u00e9geket okozhat GitOps workflow-k bevezet\u00e9sekor. \u00c9rdemes teh\u00e1t referenciaalap\u00fa megk\u00f6zel\u00edt\u00e9st alkalmazni, amelyben a Git csak a secretre mutat\u00f3 hivatkoz\u00e1st t\u00e1rolja, m\u00edg a t\u00e9nyleges secret a k\u00fcls\u0151 rendszerben marad. Ebben a cikkben konkr\u00e9t implement\u00e1ci\u00f3s p\u00e9ld\u00e1kon kereszt\u00fcl mutatok be h\u00e1rom alternat\u00edv\u00e1t a sebezhet\u0151s\u00e9g elh\u00e1r\u00edt\u00e1s\u00e1ra, bele\u00e9rtve a nat\u00edv Kubernetes Secrets \u201emeger\u0151s\u00edt\u00e9s\u00e9t\u201d (hardening) is.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">1. megk\u00f6zel\u00edt\u00e9s: Nat\u00edv Kubernetes Secrets hardeninggel<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">2. megk\u00f6zel\u00edt\u00e9s: Secrets Store CSI Driver<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">3. megk\u00f6zel\u00edt\u00e9s: External Secrets Operator<\/h4>\n\n\n\n<h3 class=\"wp-block-heading\">A referencia-architekt\u00fara<\/h3>\n\n\n\n<p>A p\u00e9ld\u00e1khoz egy meglehet\u0151sen standard architekt\u00far\u00e1t haszn\u00e1lunk:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kubernetes cluster (AKS, EKS, GKE vagy self-managed)<\/li>\n\n\n\n<li>PostgreSQL adatb\u00e1zis<\/li>\n\n\n\n<li>Webalkalmaz\u00e1s microservice-ekkel<\/li>\n\n\n\n<li>K\u00fcls\u0151 secret store<\/li>\n<\/ul>\n\n\n\n<p>Ez az architekt\u00fara egy tipikus fel\u00e9p\u00edt\u00e9s, ahol az alkalmaz\u00e1soknak biztons\u00e1gos hozz\u00e1f\u00e9r\u00e9sre van sz\u00fcks\u00e9g\u00fck k\u00fcls\u0151 er\u0151forr\u00e1sokhoz, mik\u00f6zben betartj\u00e1k a biztons\u00e1gi best practice-eket.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. megk\u00f6zel\u00edt\u00e9s: Nat\u00edv Kubernetes Secrets hardeninggel<\/h3>\n\n\n\n<p>A nat\u00edv Kubernetes Secrets komoly korl\u00e1tokat \u00e1ll\u00edt, mivel az \u00e9rt\u00e9kek base64-encodolva (nem titkos\u00edtva) t\u00e1rol\u00f3dnak az etcd-ben. Megfelel\u0151 hardening l\u00e9p\u00e9sekkel azonban biztons\u00e1gosabb\u00e1 tehet\u0151k bizonyos use case-ek sz\u00e1m\u00e1ra.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Encryption at rest enged\u00e9lyez\u00e9se az etcd sz\u00e1m\u00e1ra<\/h4>\n\n\n\n<p>Az els\u0151 kritikus hardening l\u00e9p\u00e9s az \u201eencryption at rest\u201d enged\u00e9lyez\u00e9se az etcd-hez. Titkos\u00edt\u00e1s n\u00e9lk\u00fcl a secretek plaintext form\u00e1ban t\u00e1rol\u00f3dnak a cluster etcd adatb\u00e1zis\u00e1ban.<\/p>\n\n\n\n<p>A Kubernetes Secrets megfelel\u0151 v\u00e9delm\u00e9hez az encryption at rest enged\u00e9lyez\u00e9se k\u00f6telez\u0151. A hivatalos Kubernetes dokument\u00e1ci\u00f3 alapj\u00e1n \u00edgy val\u00f3s\u00edthat\u00f3 meg:<\/p>\n\n\n\n<p>Er\u0151s titkos\u00edt\u00e1si kulcs gener\u00e1l\u00e1sa<\/p>\n\n\n\n<p>Az els\u0151 l\u00e9p\u00e9s egy biztons\u00e1gos 32-byte kulcs gener\u00e1l\u00e1sa \u00e9s base64-enk\u00f3dol\u00e1sa:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">head -c 32 \/dev\/urandom | base64<\/mark><\/p>\n\n\n\n<p>EncryptionConfiguration f\u00e1jl l\u00e9trehoz\u00e1sa<\/p>\n\n\n\n<p>Ezut\u00e1n hozz l\u00e9tre egy EncryptionConfiguration Kubernetes er\u0151forr\u00e1st:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"344\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-18-1024x344.png\" alt=\"\" class=\"wp-image-247104\" style=\"aspect-ratio:2.9768201776779333;width:753px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-18-1024x344.png 1024w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-18-980x329.png 980w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-18-480x161.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/figure>\n\n\n\n<p>A r\u00e9szletek\u00e9rt l\u00e1sd az al\u00e1bbi dokument\u00e1ci\u00f3t:<\/p>\n\n\n\n<p><a href=\"https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\">https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">A megfelel\u0151 encryption provider kiv\u00e1laszt\u00e1sa<\/h4>\n\n\n\n<p>A Kubernetes t\u00f6bb encryption providert t\u00e1mogat, melyeknek mind megvannak az el\u0151nyei, h\u00e1tr\u00e1nyai \u00e9s korl\u00e1tai. B\u0151vebb r\u00e9szletek\u00e9rt l\u00e1sd:<\/p>\n\n\n\n<p><a href=\"https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\/#providers\">https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\/#providers<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Lok\u00e1lis vs. KMS titkos\u00edt\u00e1s<\/h4>\n\n\n\n<p>Ha lok\u00e1lisan kezelt kulcsot haszn\u00e1lsz titkos\u00edt\u00e1sra (ahogy a fenti p\u00e9lda mutatja), az csak az etcd kompromitt\u00e1l\u00e1sa ellen v\u00e9d, a host kompromitt\u00e1l\u00e1sa ellen nem. Mivel az EncryptionConfiguration YAML f\u00e1jl tartalmazza a titkos\u00edt\u00e1si kulcsot, egy t\u00e1mad\u00f3, aki hozz\u00e1f\u00e9r a control plane node-okhoz, ki tudja olvasni ezt \u2013 ne feledd: a base64 csak k\u00f3dol\u00e1s, nem titkos\u00edt\u00e1s.<\/p>\n\n\n\n<p>Nagyobb biztons\u00e1g \u00e9rdek\u00e9ben fontold meg a KMS provider haszn\u00e1lat\u00e1t, amely az er\u0151forr\u00e1sokat egy data encryption key (DEK) seg\u00edts\u00e9g\u00e9vel, majd \u2013 ezt a data keyt \u2013 egy key encryption key (KEK) kulccsal titkos\u00edtja, amit egy k\u00fcls\u0151 key management service kezel. Ez az etcd \u00e9s a harmadik f\u00e9lt\u0151l sz\u00e1rmaz\u00f3 KMS provider egy\u00fcttes f\u00fcgg\u0151s\u00e9g\u00e9t hozza l\u00e9tre, ami l\u00e9nyegesen biztons\u00e1gosabb\u00e1 teszi a megold\u00e1st.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">API Server konfigur\u00e1l\u00e1sa<\/h4>\n\n\n\n<p>A static pod manifest szerkeszt\u00e9s\u00e9vel mountold az encryption configurationt a kube-apiserverhez:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"997\" height=\"679\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-19.png\" alt=\"\" class=\"wp-image-247106\" style=\"aspect-ratio:1.4683557055431031;width:740px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-19.png 997w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-19-980x667.png 980w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-19-480x327.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 997px, 100vw\" \/><\/figure>\n\n\n\n<p>Az encryption m\u0171k\u00f6d\u00e9s\u00e9nek ellen\u0151rz\u00e9se<\/p>\n\n\n\n<p>Az encryption at rest be\u00e1ll\u00edt\u00e1sa \u00e9s az API server \u00fajraind\u00edt\u00e1sa ut\u00e1n ellen\u0151rizheted, hogy a secretek titkos\u00edtva vannak-e az etcd-ben.<br>L\u00e9p\u00e9sr\u0151l l\u00e9p\u00e9sre itt: <a href=\"https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\/#verifying-that-data-is-encrypted \">https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\/#verifying-that-data-is-encrypted <\/a><\/p>\n\n\n\n<p>Megl\u00e9v\u0151 secretek titkos\u00edt\u00e1sa<\/p>\n\n\n\n<p>Fontos: a titkos\u00edt\u00e1s bekapcsol\u00e1sa el\u0151tt l\u00e9trehozott secretekhez tov\u00e1bbi l\u00e9p\u00e9sek sz\u00fcks\u00e9gesek, hogy biztosan titkos\u00edtva legyenek. A Kubernetes dokument\u00e1ci\u00f3 \u00e1tfog\u00f3 \u00fatmutat\u00f3t tartalmaz arr\u00f3l, hogyan gondoskodj r\u00f3la, hogy minden relev\u00e1ns adat titkos\u00edtva legyen, bele\u00e9rtve azokat a parancsokat is, amelyek friss\u00edtik a megl\u00e9v\u0151 secretek \u00e1llapot\u00e1t a tartalom megv\u00e1ltoztat\u00e1sa n\u00e9lk\u00fcl. L\u00e1sd az \u201eEnsure all relevant data are encrypted\u201d r\u00e9szt.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">RBAC kontrollok megval\u00f3s\u00edt\u00e1sa<\/h4>\n\n\n\n<p>K\u00f6telez\u0151 korl\u00e1tozni, ki f\u00e9rhet hozz\u00e1 \u00e9s ki kezelheti a secreteket. Itt egy p\u00e9lda RBAC konfigur\u00e1ci\u00f3ra a \u201eleast privilege\u201d elv szerint:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"997\" height=\"682\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-20.png\" alt=\"\" class=\"wp-image-247107\" style=\"aspect-ratio:1.4619126422947695;width:746px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-20.png 997w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-20-980x670.png 980w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-20-480x328.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 997px, 100vw\" \/><\/figure>\n\n\n\n<p>Ezzel az RBAC konfigur\u00e1ci\u00f3val biztos\u00edtjuk, hogy csak a myapp-service ServiceAccount olvashassa a db-credential secretj\u00e9t, \u00e9s csak a get m\u0171veletet hajthassa v\u00e9gre. Ez jelent\u0151sen cs\u00f6kkenti az illet\u00e9ktelen hozz\u00e1f\u00e9r\u00e9s kock\u00e1zat\u00e1t.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">F\u00e1jlok titkos\u00edt\u00e1sa Git-ben<\/h4>\n\n\n\n<p>Ha Kubernetes manifesteket Git repositorykban t\u00e1rolsz, az \u00e9rz\u00e9keny adatok titkos\u00edt\u00e1sa k\u00f6telez\u0151. Olyan eszk\u00f6z\u00f6k, mint a Mozilla SOPS, Sealed Secrets \u00e9s git-crypt haszn\u00e1lhat\u00f3k arra, hogy a titkos\u00edtott secretek biztons\u00e1gosan, az alkalmaz\u00e1sk\u00f3d mellett legyenek t\u00e1rolhat\u00f3k.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Kommunik\u00e1ci\u00f3k v\u00e9delme TLS\/SSL-lel<\/h4>\n\n\n\n<p>A Kubernetes-kommunik\u00e1ci\u00f3 teljes k\u00f6r\u0171 TLS titkos\u00edt\u00e1sa alapvet\u0151 az \u00e1tfog\u00f3 biztons\u00e1ghoz. Ez \u00e9rinti az API server, etcd \u00e9s kubelet kommunik\u00e1ci\u00f3j\u00e1t, valamint az alkalmaz\u00e1s szintj\u00e9n is sz\u00fcks\u00e9ges. A cert-managerhez hasonl\u00f3 certificate management eszk\u00f6z\u00f6k seg\u00edthetnek az automatiz\u00e1l\u00e1sban.<\/p>\n\n\n\n<p>Mindk\u00e9t t\u00e9ma el\u00e9g \u00f6sszetett ahhoz, hogy \u00f6n\u00e1ll\u00f3, dedik\u00e1lt \u00fatmutat\u00f3t \u00e9rdemeljen; javasolt a hivatalos Kubernetes dokument\u00e1ci\u00f3 tanulm\u00e1nyoz\u00e1sa az adott k\u00f6rnyezethez igaz\u00edtva.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. megk\u00f6zel\u00edt\u00e9s: Secrets Store CSI Driver<\/h3>\n\n\n\n<p>Ahogy az 1. r\u00e9szben bemutattam, a Secrets Store CSI Driver azzal k\u00edn\u00e1l biztons\u00e1gosabb megk\u00f6zel\u00edt\u00e9st, hogy a secretek k\u00fcls\u0151 providerekt\u0151l, k\u00f6zvetlen\u00fcl volume-k\u00e9nt vannak a podokba mountolva, teljesen megker\u00fclve az etcd t\u00e1rol\u00e1st (kiv\u00e9ve, ha a sync enged\u00e9lyezve van).<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Secrets Store CSI Driver telep\u00edt\u00e9se<\/h4>\n\n\n\n<p>A legt\u00f6bb cloud provider k\u00edn\u00e1l egyszer\u0171s\u00edtett telep\u00edt\u00e9si m\u00f3dszert. P\u00e9ld\u00e1ul AKS-en:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">az aks enable-addons &#8211;addons azure-keyvault-secrets-provider &#8211;name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 myAKSCluster &#8211;resource-group myResourceGroup<\/mark><\/p>\n\n\n\n<p>M\u00e1s k\u00f6rnyezetekben jellemz\u0151en Helm-et haszn\u00e1lunk:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">helm repo add secrets-store-csi-driver https:\/\/kubernetes-sigs.github.io\/secrets-store-csi-driver\/charts <br>helm install csi-secrets-store secrets-store-csi-driver\/secrets-store-csi-driver \\<br>&#8211;namespace kube-system \\<br>&#8211;set syncSecret.enabled=true\u00a0\u00a0 <strong># ONLY IF YOU WOULD LIKE TO ENABLE SYNC!<\/strong><\/mark><\/p>\n\n\n\n<p>A SSCSI sikeres telep\u00edt\u00e9se ut\u00e1n (Helm Charttal vagy a cloud provider megold\u00e1s\u00e1val) defini\u00e1lnunk kell a resource-t. A SecretProviderClass egy custom resource, amely meghat\u00e1rozza, mely secretek legyenek mountolva a k\u00fcls\u0151 providerb\u0151l.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"986\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-21-1024x986.png\" alt=\"\" class=\"wp-image-247109\" style=\"aspect-ratio:1.0385464909155682;width:748px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-21-1024x986.png 1024w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-21-980x944.png 980w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-21-480x462.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/figure>\n\n\n\n<p>Ez a konfigur\u00e1ci\u00f3 k\u00e9t fontos dolgot csin\u00e1l:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Meghat\u00e1rozza, mely secretek mountol\u00f3djanak az Azure Key Vaultb\u00f3l<\/li>\n\n\n\n<li>Be\u00e1ll\u00edtja az opcion\u00e1lis sync funkci\u00f3t, amely a mountolt secretekb\u0151l Kubernetes Secreteket hoz l\u00e9tre<\/li>\n<\/ul>\n\n\n\n<p>Ne feledd: ha a sync funkci\u00f3t haszn\u00e1lod, a secretek az etcd-ben is t\u00e1rol\u00f3dnak, ez\u00e9rt ebben az esetben is enged\u00e9lyezd az encryption at restet, ahogy az 1. megk\u00f6zel\u00edt\u00e9sben!<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Deployol\u00e1s CSI Driverrel k\u00f6zvetlen mounttal<\/h4>\n\n\n\n<p>A legbiztons\u00e1gosabb megk\u00f6zel\u00edt\u00e9s, ha az alkalmaz\u00e1s k\u00f6zvetlen\u00fcl a mountolt volume-r\u00f3l olvassa a secreteket. Ezzel a konfigur\u00e1ci\u00f3val az alkalmaz\u00e1s f\u00e1jlokb\u00f3l olvas, nem environment variable-\u00f6kb\u0151l \u2014 ez biztons\u00e1gosabb, de alkalmaz\u00e1s-m\u00f3dos\u00edt\u00e1st ig\u00e9nyelhet. Azokhoz az alkalmaz\u00e1sokhoz, amelyek nem tudnak egyszer\u0171en f\u00e1jlb\u00f3l olvasni, haszn\u00e1lhat\u00f3 a sync funkci\u00f3 Kubernetes Secret l\u00e9trehoz\u00e1s\u00e1ra.<\/p>\n\n\n\n<p>Bal oldalt p\u00e9ld\u00e1k vannak Kubernetes Secret Sync n\u00e9lk\u00fcl, jobb oldalt pedig a syncelt megold\u00e1sra.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"873\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/Nevtelen-1-1-1024x873.png\" alt=\"\" class=\"wp-image-247111\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/Nevtelen-1-1-980x836.png 980w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/Nevtelen-1-1-480x409.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/figure>\n\n\n\n<p>Megjegyz\u00e9s: m\u00e9g ha environment variable-\u00f6ket is haszn\u00e1lunk, a volume mountol\u00e1sa akkor is sz\u00fcks\u00e9ges, mert a CSI Driver csak azut\u00e1n hozza l\u00e9tre a Kubernetes Secretet, miut\u00e1n sikeresen mountolta a secreteket a k\u00fcls\u0151 providerb\u0151l.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. megk\u00f6zel\u00edt\u00e9s: External Secrets Operator<\/h3>\n\n\n\n<p>Az External Secrets Operator (ESO) m\u00e1s megk\u00f6zel\u00edt\u00e9st alkalmaz. A secretek volume-k\u00e9nt t\u00f6rt\u00e9n\u0151 mountol\u00e1sa helyett k\u00fcls\u0151 providerekb\u0151l szinkroniz\u00e1lja azokat Kubernetes Secretekkel.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">External Secrets Operator telep\u00edt\u00e9se<\/h4>\n\n\n\n<p>Az ESO telep\u00edthet\u0151 Helmmel:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">helm repo add external-secrets https:\/\/charts.external-secrets.io<br>helm install external-secrets external-secrets\/external-secrets \\<br>&#8211;namespace external-secrets \\<br>&#8211;create-namespace<\/mark><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Azure autentik\u00e1ci\u00f3 konfigur\u00e1l\u00e1sa<\/h4>\n\n\n\n<p>Azure Key Vault integr\u00e1ci\u00f3hoz az ESO t\u00f6bb autentik\u00e1ci\u00f3s m\u00f3dszert t\u00e1mogat. 2025. december \u00e1llapot szerint AKS clusterekn\u00e9l a Workload Identity a javasolt megk\u00f6zel\u00edt\u00e9s.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Azure autentik\u00e1ci\u00f3 Workload Identityvel<\/h4>\n\n\n\n<p>K\u00f6vetelm\u00e9nyek:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AKS cluster enged\u00e9lyezett Workload Identityvel<\/li>\n\n\n\n<li>Azure Key Vault relev\u00e1ns secrettel<\/li>\n\n\n\n<li>Azure AD Application (Enterprise App), amely rendelkezik Key Vault hozz\u00e1f\u00e9r\u00e9ssel, \u00e9s a cluster ServiceAccountj\u00e1hoz van feder\u00e1lva<\/li>\n<\/ul>\n\n\n\n<p>Els\u0151 l\u00e9p\u00e9sk\u00e9nt annot\u00e1lnod kell a Kubernetes ServiceAccountot, hogy t\u00e1rs\u00edtsd az Azure AD Applicationh\u00f6z.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"981\" height=\"190\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-17.png\" alt=\"\" class=\"wp-image-247102\" style=\"aspect-ratio:5.16330145235565;width:697px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-17.png 981w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-17-480x93.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 981px, 100vw\" \/><\/figure>\n\n\n\n<p>Ezut\u00e1n konfigur\u00e1lnod kell a SecretStore er\u0151forr\u00e1st Workload Identityhez.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"976\" height=\"325\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-16.png\" alt=\"\" class=\"wp-image-247101\" style=\"aspect-ratio:3.003193571649325;width:697px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-16.png 976w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-16-480x160.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 976px, 100vw\" \/><\/figure>\n\n\n\n<p>Hozd l\u00e9tre az ExternalSecret er\u0151forr\u00e1st.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"712\" height=\"529\" src=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-15.png\" alt=\"\" class=\"wp-image-247099\" style=\"width:697px;height:auto\" srcset=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-15.png 712w, https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/image-15-480x357.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 712px, 100vw\" \/><\/figure>\n\n\n\n<p>Amint az ExternalSecret er\u0151forr\u00e1s l\u00e9trej\u00f6tt \u00e9s a sync lefutott, l\u00e9trej\u00f6n egy Kubernetes Secret er\u0151forr\u00e1s. Ellen\u0151rizheted ezzel a paranccsal:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">kubectl get secret myapp-azure-secret -n external-secrets -o yaml<\/mark><\/p>\n\n\n\n<p>Ha a sync nem siker\u00fcl, n\u00e9zd meg az operator logokat:<\/p>\n\n\n\n<p><mark style=\"background-color:#abb8c3\" class=\"has-inline-color has-white-color\">kubectl logs deployment\/external-secrets -n external-secrets<\/mark><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u00d6sszegz\u00e9s<\/h3>\n\n\n\n<p>Ebben a bejegyz\u00e9sben t\u00f6bb implement\u00e1ci\u00f3t \u00e9s p\u00e9ld\u00e1t j\u00e1rtunk v\u00e9gig a Kubernetes secret management t\u00e9m\u00e1j\u00e1ban, a k\u00f6vetkez\u0151 kulcsmegk\u00f6zel\u00edt\u00e9sekre f\u00f3kusz\u00e1lva:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>1. megk\u00f6zel\u00edt\u00e9s: Nat\u00edv Kubernetes Secrets hardeninggel<\/strong> \u2013 K\u00f6nny\u0171 haszn\u00e1lni, alap use case-ekhez megfelel\u0151 lehet, de production k\u00f6rnyezetben nem aj\u00e1nlott.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>2. megk\u00f6zel\u00edt\u00e9s: Secrets Store CSI Driver<\/strong> \u2013 K\u00fcls\u0151 secret store-okat integr\u00e1l CSI volume-okon kereszt\u00fcl, lehet\u0151v\u00e9 t\u00e9ve a secretek dinamikus mountol\u00e1s\u00e1t an\u00e9lk\u00fcl, hogy az etcd-ben maradn\u00e1nak; ugyanakkor az alkalmaz\u00e1snak f\u00e1jlokb\u00f3l kell olvasnia a secreteket, ami k\u00f3dm\u00f3dos\u00edt\u00e1st ig\u00e9nyelhet.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>3. megk\u00f6zel\u00edt\u00e9s: External Secrets Operator (ESO)<\/strong> \u2013 K\u00f6zvetlen\u00fcl szinkroniz\u00e1l Azure Key Vaulthoz hasonl\u00f3 providerekb\u0151l Kubernetes Secretekbe, t\u00e1mogatva a nat\u00edv secret workflow-kat \u00e9s az automatiz\u00e1l\u00e1st. \u00c1ltal\u00e1ban ez a legink\u00e1bb aj\u00e1nlott.<\/li>\n<\/ul>\n\n\n\n<p>A fenti p\u00e9ld\u00e1kat k\u00f6vetve kiv\u00e1laszthatod \u00e9s implement\u00e1lhatod azt a secret management mint\u00e1t, amely a legjobban illeszkedik az ig\u00e9nyeidhez. Ha lehets\u00e9ges, haszn\u00e1lj olyan biztons\u00e1gos m\u00f3dszert, mint az External Secrets Operator.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Forr\u00e1sok<\/h3>\n\n\n\n<p><a href=\"https:\/\/kubernetes.io\/docs\/concepts\/configuration\/secret\">https:\/\/kubernetes.io\/docs\/concepts\/configuration\/secret<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kubernetes.io\/docs\/concepts\/security\/secrets-good-practices\">https:\/\/kubernetes.io\/docs\/concepts\/security\/secrets-good-practices<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data\">https:\/\/kubernetes.io\/docs\/tasks\/administer-cluster\/encrypt-data<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/secrets-store-csi-driver.sigs.k8s.io\">https:\/\/secrets-store-csi-driver.sigs.k8s.io<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/external-secrets.io\">https:\/\/external-secrets.io<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A nat\u00edv Kubernetes Secrets val\u00f3j\u00e1ban csak base64-encodolva van, nem titkos\u00edtva, ami komoly biztons\u00e1gi sebezhet\u0151s\u00e9geket okozhat GitOps workflow-k bevezet\u00e9sekor. \u00c9rdemes teh\u00e1t referenciaalap\u00fa megk\u00f6zel\u00edt\u00e9st alkalmazni, amelyben a Git csak a secretre mutat\u00f3 hivatkoz\u00e1st t\u00e1rolja, m\u00edg a t\u00e9nyleges secret a k\u00fcls\u0151 rendszerben marad. Ebben a cikkben konkr\u00e9t implement\u00e1ci\u00f3s p\u00e9ld\u00e1kon kereszt\u00fcl mutatok be h\u00e1rom alternat\u00edv\u00e1t a sebezhet\u0151s\u00e9g elh\u00e1r\u00edt\u00e1s\u00e1ra, bele\u00e9rtve [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":247118,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[347,721,301],"tags":[719,720,717,715,718,716],"class_list":["post-247076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-technologia","category-kubernetes","category-uncategorized-hu","tag-csi-driver","tag-eso","tag-hardening","tag-kubernetes","tag-secret-store","tag-secrets","blogauthor-bene-marcell"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\" \/>\n<meta property=\"og:locale\" content=\"hu_HU\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog\" \/>\n<meta property=\"og:description\" content=\"A nat\u00edv Kubernetes Secrets val\u00f3j\u00e1ban csak base64-encodolva van, nem titkos\u00edtva, ami komoly biztons\u00e1gi sebezhet\u0151s\u00e9geket okozhat GitOps workflow-k bevezet\u00e9sekor. \u00c9rdemes teh\u00e1t referenciaalap\u00fa megk\u00f6zel\u00edt\u00e9st alkalmazni, amelyben a Git csak a secretre mutat\u00f3 hivatkoz\u00e1st t\u00e1rolja, m\u00edg a t\u00e9nyleges secret a k\u00fcls\u0151 rendszerben marad. Ebben a cikkben konkr\u00e9t implement\u00e1ci\u00f3s p\u00e9ld\u00e1kon kereszt\u00fcl mutatok be h\u00e1rom alternat\u00edv\u00e1t a sebezhet\u0151s\u00e9g elh\u00e1r\u00edt\u00e1s\u00e1ra, bele\u00e9rtve [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\" \/>\n<meta property=\"og:site_name\" content=\"adesso business consulting Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adessoorange\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-09T10:02:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-10T10:30:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"martin.kiss\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Szerz\u0151:\" \/>\n\t<meta name=\"twitter:data1\" content=\"martin.kiss\" \/>\n\t<meta name=\"twitter:label2\" content=\"Becs\u00fclt olvas\u00e1si id\u0151\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 perc\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\"},\"author\":{\"name\":\"martin.kiss\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/person\/b029dbc3cacd8c2d5e3f8553852f7f0d\"},\"headline\":\"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s\",\"datePublished\":\"2025-12-09T10:02:02+00:00\",\"dateModified\":\"2025-12-10T10:30:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\"},\"wordCount\":1831,\"publisher\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg\",\"keywords\":[\"CSI Driver\",\"ESO\",\"Hardening\",\"Kubernetes\",\"Secret Store\",\"Secrets\"],\"articleSection\":[\"Cloud Technol\u00f3gia\",\"Kubernetes\",\"Uncategorized @hu\"],\"inLanguage\":\"hu\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\",\"url\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\",\"name\":\"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg\",\"datePublished\":\"2025-12-09T10:02:02+00:00\",\"dateModified\":\"2025-12-10T10:30:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#breadcrumb\"},\"inLanguage\":\"hu\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage\",\"url\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg\",\"contentUrl\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg\",\"width\":2560,\"height\":1707},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/blog.adesso-bc.com\/hu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#website\",\"url\":\"https:\/\/blog.adesso-bc.com\/hu\/\",\"name\":\"adesso business consulting Blog\",\"description\":\"A leg\u00fajabb fejlem\u00e9nyek \u00e9s izgalmas t\u00e9m\u00e1k az SAP vil\u00e1g\u00e1b\u00f3l\",\"publisher\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.adesso-bc.com\/hu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hu\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#organization\",\"name\":\"adesso orange AG\",\"url\":\"https:\/\/blog.adesso-bc.com\/hu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hu\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2022\/03\/adesso-orange-blog-logo-gry.svg\",\"contentUrl\":\"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2022\/03\/adesso-orange-blog-logo-gry.svg\",\"width\":100,\"height\":100,\"caption\":\"adesso orange AG\"},\"image\":{\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/adessoorange\",\"https:\/\/www.instagram.com\/adesso.orange\",\"https:\/\/www.linkedin.com\/company\/adesso-orange\",\"https:\/\/www.xing.com\/pages\/adesso-orange\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/person\/b029dbc3cacd8c2d5e3f8553852f7f0d\",\"name\":\"martin.kiss\",\"url\":\"https:\/\/blog.adesso-bc.com\/hu\/author\/martin-kiss\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/","og_locale":"hu_HU","og_type":"article","og_title":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog","og_description":"A nat\u00edv Kubernetes Secrets val\u00f3j\u00e1ban csak base64-encodolva van, nem titkos\u00edtva, ami komoly biztons\u00e1gi sebezhet\u0151s\u00e9geket okozhat GitOps workflow-k bevezet\u00e9sekor. \u00c9rdemes teh\u00e1t referenciaalap\u00fa megk\u00f6zel\u00edt\u00e9st alkalmazni, amelyben a Git csak a secretre mutat\u00f3 hivatkoz\u00e1st t\u00e1rolja, m\u00edg a t\u00e9nyleges secret a k\u00fcls\u0151 rendszerben marad. Ebben a cikkben konkr\u00e9t implement\u00e1ci\u00f3s p\u00e9ld\u00e1kon kereszt\u00fcl mutatok be h\u00e1rom alternat\u00edv\u00e1t a sebezhet\u0151s\u00e9g elh\u00e1r\u00edt\u00e1s\u00e1ra, bele\u00e9rtve [&hellip;]","og_url":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/","og_site_name":"adesso business consulting Blog","article_publisher":"https:\/\/www.facebook.com\/adessoorange","article_published_time":"2025-12-09T10:02:02+00:00","article_modified_time":"2025-12-10T10:30:41+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"martin.kiss","twitter_card":"summary_large_image","twitter_misc":{"Szerz\u0151:":"martin.kiss","Becs\u00fclt olvas\u00e1si id\u0151":"8 perc"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#article","isPartOf":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/"},"author":{"name":"martin.kiss","@id":"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/person\/b029dbc3cacd8c2d5e3f8553852f7f0d"},"headline":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s","datePublished":"2025-12-09T10:02:02+00:00","dateModified":"2025-12-10T10:30:41+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/"},"wordCount":1831,"publisher":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/#organization"},"image":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg","keywords":["CSI Driver","ESO","Hardening","Kubernetes","Secret Store","Secrets"],"articleSection":["Cloud Technol\u00f3gia","Kubernetes","Uncategorized @hu"],"inLanguage":"hu"},{"@type":"WebPage","@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/","url":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/","name":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s - adesso business consulting Blog","isPartOf":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage"},"image":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg","datePublished":"2025-12-09T10:02:02+00:00","dateModified":"2025-12-10T10:30:41+00:00","breadcrumb":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#breadcrumb"},"inLanguage":"hu","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/"]}]},{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#primaryimage","url":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg","contentUrl":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2025\/12\/h-co-AW_P_NU9MI8-unsplash-scaled.jpg","width":2560,"height":1707},{"@type":"BreadcrumbList","@id":"https:\/\/blog.adesso-bc.com\/hu\/kubernetes-secret-kezeles-gyakorlati-megvalositas\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/blog.adesso-bc.com\/hu\/"},{"@type":"ListItem","position":2,"name":"Kubernetes Secret kezel\u00e9s: Gyakorlati megval\u00f3s\u00edt\u00e1s"}]},{"@type":"WebSite","@id":"https:\/\/blog.adesso-bc.com\/hu\/#website","url":"https:\/\/blog.adesso-bc.com\/hu\/","name":"adesso business consulting Blog","description":"A leg\u00fajabb fejlem\u00e9nyek \u00e9s izgalmas t\u00e9m\u00e1k az SAP vil\u00e1g\u00e1b\u00f3l","publisher":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.adesso-bc.com\/hu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hu"},{"@type":"Organization","@id":"https:\/\/blog.adesso-bc.com\/hu\/#organization","name":"adesso orange AG","url":"https:\/\/blog.adesso-bc.com\/hu\/","logo":{"@type":"ImageObject","inLanguage":"hu","@id":"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/logo\/image\/","url":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2022\/03\/adesso-orange-blog-logo-gry.svg","contentUrl":"https:\/\/blog.adesso-bc.com\/wp-content\/uploads\/2022\/03\/adesso-orange-blog-logo-gry.svg","width":100,"height":100,"caption":"adesso orange AG"},"image":{"@id":"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adessoorange","https:\/\/www.instagram.com\/adesso.orange","https:\/\/www.linkedin.com\/company\/adesso-orange","https:\/\/www.xing.com\/pages\/adesso-orange"]},{"@type":"Person","@id":"https:\/\/blog.adesso-bc.com\/hu\/#\/schema\/person\/b029dbc3cacd8c2d5e3f8553852f7f0d","name":"martin.kiss","url":"https:\/\/blog.adesso-bc.com\/hu\/author\/martin-kiss\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/posts\/247076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/comments?post=247076"}],"version-history":[{"count":18,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/posts\/247076\/revisions"}],"predecessor-version":[{"id":247117,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/posts\/247076\/revisions\/247117"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/media\/247118"}],"wp:attachment":[{"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/media?parent=247076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/categories?post=247076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.adesso-bc.com\/hu\/wp-json\/wp\/v2\/tags?post=247076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}