Sealed secrets for Kubernetes - enabling GitOps for secrets
Source: YouTube · Kubesimplify · published May 11, 2023 · 15:58
The video introduces sealed secrets as a solution for securely managing Kubernetes secrets that can be safely committed to Git repositories 0:00.
Key Takeaways:
• Regular Kubernetes secrets are only base64 encoded, not secure enough, and can't be safely committed to repositories 0:13
• Sealed secrets use one-way encryption where only the controller running in the cluster can decrypt the secrets 2:07
• The system requires two components: kubeseal CLI for encryption and a controller for decryption in the cluster 1:51
• Sealed secrets enable true GitOps workflows by allowing encrypted secrets to be committed to repositories and managed with tools like Argo CD 12:10
Sealed secrets provide a simple yet effective solution for secure secret management in Kubernetes environments, enabling better GitOps implementation 14:22.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
in the past few videos I have stressed enough on cuity secrets and we'll continue this journey and explore another tool today so time and again I have said the same thing again that you know the kuity secrets are not secure enough it is base 64 encoded and there's no encryption over there and anybody can easily decode the secretes uh you cannot commit the secades to you know any place like GitHub or anything like that natively you won't be able to use any of the uh secret stores which are out there now in past we have discussed already external Secrets operator CSI driver uh Secrets uh and in this particular video we are going to discover yet another tool which is called sealed secrets so how you can actually achieve committing of secrets into the giup repositories to enable to in even Emp…