Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable FluxCD to integrate with git-crypt to apply existing sealed secret private key #57

Closed
xunholy opened this issue Jul 12, 2020 · 4 comments · Fixed by #352
Closed

Enable FluxCD to integrate with git-crypt to apply existing sealed secret private key #57

xunholy opened this issue Jul 12, 2020 · 4 comments · Fixed by #352
Labels
enhancement New feature or request feature_request question Further information is requested

Comments

@xunholy
Copy link
Owner

xunholy commented Jul 12, 2020

Details

The sealed secret operator pod starts will generate a new private key if one does not exist within the cluster. Currently, the private key that is used to decrypt all existing secrets is stored in git-crypt and manually applied post-setup of Flux in the cluster using the install/sealed-secret.sh script.

Ideally, Flux being integrated with git-crypt means Flux will have the capability to check out the private key within the cluster and apply it without requiring manual intervention after the operator has already initialized it.

https://github.com/bitnami-labs/sealed-secrets#managing-existing-secrets
@xunholy xunholy added the enhancement New feature or request label Jul 12, 2020
@issue-label-bot
Copy link

Issue-Label Bot is automatically applying the label feature_request to this issue, with a confidence of 0.97. Please mark this comment with 👍 or 👎 to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

@xunholy
Copy link
Owner Author

xunholy commented Jul 12, 2020

More details on how the current approach works - https://github.com/bitnami-labs/sealed-secrets#how-can-i-do-a-backup-of-my-sealedsecrets

@xunholy xunholy mentioned this issue Jul 12, 2020
Closed
@xunholy
Copy link
Owner Author

xunholy commented Jul 12, 2020

Alternatively, https://git-secret.io/ is supported with FluxCD

@xunholy xunholy changed the title Enable Flux to integrate with git-crypt to apply existing sealed secret private key Enable FluxCD to integrate with git-crypt to apply existing sealed secret private key Jul 12, 2020
@xunholy
Copy link
Owner Author

xunholy commented Aug 18, 2020

This PR may possibly help solve this issue. fluxcd/flux#3253

@xunholy xunholy added the question Further information is requested label Oct 16, 2020
@xunholy xunholy mentioned this issue Mar 6, 2021
Merged
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request feature_request question Further information is requested
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Improvements: Secrets Strategy; Release Strategy; Repository Structure xunholy/k8s-gitops
1 participant
@xunholy