Skip to main contentNedix.io

Sealed Secrets

Provides a way to check secrets into version control.

Resources

Base

/base/sealed-secrets/kustomization.yaml
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization


namespace: sealed-secrets


resources:
  - namespace.yaml
  - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.18.5/controller.yaml
/base/sealed-secrets/namespace.yaml
---
apiVersion: v1
kind: Namespace


metadata:
  name: sealed-secrets

Applying

Apply

wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.18.5/controller.yaml \
&& kubectl apply -f controller.yaml

Check status of the controller pod.

kubectl get pods -n kube-system | grep sealed-secrets-controller

The Sealed Secret CRD, controller and RBAC artifacts should be installed in the kube-system namespace.

Install CLI

Darwin

brew install kubeseal

Linux

wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.18.5/kubeseal-0.18.5-linux-amd64.tar.gz \
&& tar xfz kubeseal-0.18.5-linux-amd64.tar.gz \
&& sudo install -m 755 kubeseal /usr/local/bin/kubeseal

References