使用 kubeseal 将 Kubernetes 密钥密封到 Git 安全的清单中

Encrypt Kubernetes Secret manifests against a Sealed Secrets controller so agents can commit cluster-targeted secrets to Git without exposing plaintext.

Prerequisites

kubeseal CLI, access to the target Sealed Secrets controller certificate or cluster, kubectl-compatible Secret manifest input

Installation

Use the upstream install or setup path that matches your environment:
- brew install kubeseal
- go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

Requirements and caveats from upstream:
-
- (requires secure access to the Kubernetes API server), which is
- A cluster administrator must have already installed the SealedSecret CRDs.

Basic usage or getting-started notes:
- <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
- Usage
- The Usage section explores in more detail how you craft SealedSecret resources.

• Source: https://github.com/1991513ccie-png/skills
• Extracted from upstream docs: https://raw.githubusercontent.com/bitnami-labs/sealed-secrets/HEAD/README.md

Documentation

• https://github.com/1991513ccie-png/skills