[Spike][Security] I want to remove k8s secrets in order to improve security in production

[6l20]

Summary / User Story

It is not recommended to use k8s secrets in a prod environment, a better solution would consist in havin secrets managed by a dedicated Vault or managed solution depending on the target cloud platform.

Pre-requisites

• Having stable deployments ready
• Having "sandbox" clusters available
• Having identified, categorized and qualified all sensitive data
• For each targeted cloud PF identify all possible solutions
• For each targeted cloud PF identify the best Vault solution

Technical Notes

• Links to architecture, documents

Business Value

Minimize Threats from insiders / increase overall security level

Acceptance Criteria

• Have at least one POC running for each possible cloud PF. (add list below on the go)
• Write technical / architecture documentation related to each and every solution
• Have helm and k8s charts updated accordingly