sealed-secrets
This tool allows for one-way encryption of Kubernetes confidential data (Secrets) to be securely stored in go repository. An auditor (controller) component running the target cluster is designed so that only it can solve encrypted SealedSecret objects itself. In this way, configuration management can be done safely in general (public) warehouses.
bitnami · GitOps & Infrastructure as Code
Common commercial products in this category: HCP Terraform, Spacelift, env0
- You can convert Kubernetes Secret objects into SealedSecret format by one-way encryption.
- You can safely store encrypted data in public go repositories.
- You can perform an analysis of encrypted data with the target cluster employee auditor component.
- • NeutralGitHub Issue
Getting a "cannot fetch certificate" when working with kubeseal client
“When trying to seal a secret with the kubeseal client like in the follwing, kubeseal hangs: `kubeseal < mysecret.yml -o yaml` When I set a timeout with the `--request-timeout` option, I get a more detailed message: ``` E1114 14:56:18.638781 8199 round_trippers.go:174]…”
- ↑ PositiveGitHub Issue
Status of the project and where it's going
“We ([lunarway]( are very interested in this project and would like to discuss its current state and progress. It seems that there are some great ideas, and solutions in PR's to bring this project to the next level. Unfortunately, the momentum seems to have slowed down, and there…”