Documentation
Docs
Production

Scaling & Security

Hardening your system for enterprise scale.

Network Policies

By default, Consonant applies a "Deny All" network policy. Only mTLS traffic from the sidecar is allowed.

Secret Management

Inject secrets into agents using Kubernetes Secrets or Vault.

yaml
env:
  - name: API_KEY
    valueFrom:
      secretKeyRef:
        name: my-secret
        key: api-key