sealed-secrets.md

Sealed Secrets

Install kubeseal locally

# Linux
wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.9.5/kubeseal-linux-amd64 -O kubeseal
sudo install -m 755 kubeseal /usr/local/bin/kubeseal
rm -rf kubeseal

# MacOS
brew install kubeseal

Create sealed-secrets public certificate

cd secrets
kubeseal --controller-name sealed-secrets --fetch-cert > ./pub-cert.pem

Fill in the secrets environment file

cd secrets
cp .env.secrets.sample .env.secrets

Generate secrets

cd secrets
./generate-secrets.sh