Using AAPM Agent on Kubernetes and OpenShift Platforms

kron pam secrets management allows applications to retrieve sensitive credentials (passwords, api keys, certificates, and others) at runtime from a central kron pam without embedding them in code the kron pam secrets management agent for kubernetes integration consists of three components kron pam secrets management agent components component purpose secrets management agent for kubernetes the single central bridge between the cluster and the kron pam server it registers with kron pam and relays other components' secret requests to kron pam aapm service an http/rest service for direct secret lookup (/vault endpoint) used by clients that don't require sidecar injections aapm sidecar (injector) a mutating webhook that automatically adds an "aapm client" container to pods in labeled namespaces periodically fetches secrets and writes them to a file secrets management agent kubernetes architecture and access flow