Using AAPM Agent on Kubernetes and OpenShift Platforms

kron pam eliminates hardcoded credentials in kubernetes and openshift environments using two different methods password service and sidecar container method password service method kron pam's password service provides dynamic and on demand credential retrieval applications request credentials directly from the password service via secure api calls this method ensures that secrets are securely retrieved at runtime and are never statically stored within the application sidecar container method the aapm agent and sidecar container are deployed as separate containers within the same pod the aapm agent retrieves passwords, keys, and certificates from kron pam the aapm agent and sidecar container communicate over a secure channel to transfer secrets securely the sidecar container injects the retrieved secrets into the application environment applications access the credentials via environment variables or volume mounted files the descriptions of the fields on the kubernetes field description pods pods are the smallest deployable units of computing that can be created and managed in kubernetes aapm agent pod the aapm agent pod is responsible for communicating with kron pam and receiving the secrets that are updated in certain periods aapm agent password service the password service is used to retrieve the password from the agent cache through the service url, based on the restful api request sent by the application aapm agent sidecar the aapm agent sidecar runs alongside the k8s application continuously it requests the secret from the aapm agent and writes it to the keystore, enabling the application to retrieve it namespace a namespace helps to separate a cluster into logical units it can help to granularly organize, allocate, manage, and secure cluster resources shared volume a shared volume is used to provide the secret to the application the aapm agent application is a java process based application it requires the installation of the necessary jdk files to run on operating systems, with usage methods dependent on the operating system the aapm agent operates on the core aapm module for container orchestration platforms , the aapm agent service is run by creating an agent pod linked to the aapm module, tailored to the platform the aapm agent pod is deployed under the aapm agent namespace without requiring installation in the namespaces where the applications are running