Sealed Secrets

01. What are sealed secrets ?

02. Why use sealed secrets ?

03. Components of sealed secrets

04. How it works?

05. Example

wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.27.2/kubeseal-0.27.2-linux-amd64.tar.gz

tar -xvf kubeseal-0.27.2-linux-amd64.tar.gz

chmod +x kubeseal

sudo mv kubeseal /usr/local/bin

# Controller

helm repo add sealed-secrets https://bitnami-labs.github.io/sealed-secrets

helm install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets

# Create K8 Secret

kubectl create secret generic kusecret --from-literal=db_pass=abc123

kubectl get secrets

kubectl get secrets -o yaml

echo YWJjMTIz | base64 -d

echo -n cka | kubectl create secret generic mysecret --dry-run=client --from-file=course=/dev/stdin -o json > mysecret.json

cat mysecret.json

kubeseal <mysecret.json> mysealedsecret.json

cat mysealedsecret.json

kubectl create -f mysealedsecret.json

kubectl get secrets mysecret -o yaml

#Mysql

echo -n kubernetes | kubectl create secret generic mysecret --dry-run=client --from-file=password=/dev/stdin -o json > mysqlsecret.json

kubeseal <mysqlsecret.json>mysqlsealedsecret.json

cat mysqlsealedsecret.json

Link: https://archive.eksworkshop.com/beginner/200_secrets/installing-sealed-secrets/

kubectl create secret generic mysql-secret2 --from-literal=password=kubernetes -o json > mysql.json