Cassandra Summit

K8ssandra is a Kubernetes-native distribution of Cassandra that provides a batteries-included set of tools to run Cassandra on Kubernetes. K8ssandra enables CQL authentication by default and automatically generates unique credentials for Cassandra’s CQL administrator account. This automated bootstrapping of security features provides excellent ease of use, however it may not match the credential-handling used by the rest of your systems. There are a wide variety of credential handling practices and many organizations value consistency across the different components in their fleet. Datadog has partnered with K8ssandra maintainers to develop support in the project for external secrets providers. In this talk, we’ll walk through the default behaviors of K8ssandra, the design of the external secrets system, and how you can use it to align K8ssandra with your own credential management practices.