Storing Secrets in GIT | GitOps | Kubernetes
Source: YouTube · That DevOps Guy · published Nov 28, 2022 · 27:18
The video explains how Sealed Secrets enable storing encrypted Kubernetes secrets in Git repositories for GitOps workflows 0:38.
Key Takeaways:
• Sealed Secrets allow you to store encrypted secrets in Git repositories while maintaining GitOps practices 0:51
• The Sealed Secrets controller generates encryption keys automatically and rotates them every 30 days by default 11:47
• The kubeseal CLI tool converts regular Kubernetes secrets into encrypted sealed secrets that can be safely committed to Git 13:52
• When applied to a cluster, sealed secrets are automatically decrypted by the controller into regular secrets that applications can use 15:16
• Encryption keys can be backed up and migrated between clusters, but must be restored before the controller starts 21:04
Sealed Secrets provide a practical solution for including secrets in GitOps pipelines without exposing sensitive data 23:42.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
so you're using kubernetes and perhaps you're wanting to get into git Ops which is storing your yaml manifests in a git repo and then having your pipelines automatically synchronize from the git repo in theory this is a great concept but the first question that comes to mind is how do we store everything in git things like Secrets now the general recommendation is to store secrets in something like a vault and manage it outside of git but what if I told you that there is another way gitops is the process of having your infrastructure declarations in git and having pipelines synchronize those declarations to the actual infrastructure We cannot put secrets in git but this is where sealed Secrets come in a sealed secret is a secret that is strongly encrypted and can be made public just like p…