Fresh repo - removed all old commits
This commit is contained in:
Vlad
@@ -0,0 +1,3 @@
|
||||
# Install via the repo:
|
||||
|
||||
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.17.2/cert-manager.yaml
|
||||
@@ -0,0 +1,34 @@
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: ClusterIssuer
|
||||
metadata:
|
||||
name: letsencrypt-prod
|
||||
spec:
|
||||
acme:
|
||||
email: ENC[AES256_GCM,data:CrZo3dGvCQLpJXvy,iv:QoNm8du+SE1b9LJu1c+K1JmsiXoSzhsavjJC51/zXwo=,tag:0Og1CvUck2T5nnpb0N3fOw==,type:str]
|
||||
server: ENC[AES256_GCM,data:DByJK2Z14pwAvNb5sZm1XNhd/Okk0DH25990+x+v8kEYbH/dvaofT2CqhH8l7A==,iv:9RZsmeb2wGELNB9QaJZgcEDQnHsmQJGwi/yCOZYHCLM=,tag:nT3eBQ58+h5+kVq29h+1SA==,type:str]
|
||||
privateKeySecretRef:
|
||||
name: ENC[AES256_GCM,data:PILSt075yDKElJoBuromdw==,iv:8tzvxx7ZAp+55tIX+Mvb88Xpkrlnx5Y0WPbNs/patZ0=,tag:wG7QUxx5jpK1Xp8iA+4rBA==,type:str]
|
||||
solvers:
|
||||
- http01:
|
||||
ingress:
|
||||
class: ENC[AES256_GCM,data:Id3YCpE=,iv:QwFhvDitp/hTfp5ZiKDHzDCT7kd675s48SxwD6zbvAo=,tag:t3oQenPSz20sbTB7z/2GNA==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwc0RxTFhsNlZqN1FGT1FN
|
||||
WThOSXVkdHJHb0tkVlNWSzBJbDJwd1FjYkJNCkhKcVhRVit5TThGMjcrRk1vSE5i
|
||||
d3ZDblJNNU5DK2NzTEIwL3FJOWo2SkkKLS0tIDh0WSt2bmJjWkg0ZE93SWNYeXJQ
|
||||
cEREOHNmNUdTTCtaMzR0d1M3R0lmdm8KPzNSmxcUA2ORaPq2oy0sspflecpTVHs1
|
||||
dmz5WTa7gGc+EzfxabZd3zm5AtSXcymlWrhRAST5gDKEiiLnb7ZtiA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:13Z"
|
||||
mac: ENC[AES256_GCM,data:aXN14lEJ/BmOwcEwjMX3/eH8PClQB2S+5scHxwojOQAY9IqLJ6RuMmkwOuhdFGXnyTHSwrzCHcSJJMR+/04QPFYCtcGepUaLkcJ54crBQVEW/QSU8/I70JO+CdC+nWuUG3fcVHMPkc84qu7m6K+6QGfGQqLobanmvIQ9OaoH990=,iv:HiZoabEBxzUI1fYpvVVBxhZECpa3DXtnFajEevFFbqw=,tag:2uetHUV5UQ7zJZ/jPxIuzA==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
@@ -0,0 +1,34 @@
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: ClusterIssuer
|
||||
metadata:
|
||||
name: letsencrypt-staging
|
||||
spec:
|
||||
acme:
|
||||
email: ENC[AES256_GCM,data:J8DC+/h17kupCA0X,iv:Z15nkYaChXer5krxPWvTwU+WugyDzQRb4/UnXc9l0cQ=,tag:QMpVTXIHczEDTWVlkbXRgg==,type:str]
|
||||
server: ENC[AES256_GCM,data:dQPDPek/+7JXGXFdYbWW7Hp57T+PAe3qj66rFWFWeLOV7Eg0Pn2BQ7YfrQiMEbmMmEQ6T12i,iv:SYbkBCXSpdcqaAqjY6oi5lDb2IKz8R2LwOM23Izx2tY=,tag:KctQ0oLriNSLDrpeeYTzpg==,type:str]
|
||||
privateKeySecretRef:
|
||||
name: ENC[AES256_GCM,data:sc235oq6O9BolS1tB823sVpxsg==,iv:F07MyXMLZAP5EYTZBU9k/V9dK8/hxVr8P26AeoyOooc=,tag:Asa224pIFnJcIiPKw1FQ4w==,type:str]
|
||||
solvers:
|
||||
- http01:
|
||||
ingress:
|
||||
class: ENC[AES256_GCM,data:xnZIAXM=,iv:tk65ggryt/ijexRz4fk5ow4EkJGTJPvuS0AW1/CbgaE=,tag:tZUEdS00bNfdkCBaEfOghw==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZODhBaE9FVzAvTTd0YXZj
|
||||
eEM5bWQ0UHJpa0JFNWhVK2RHV3NITHZBNHpvClJEaWxBaGtwUnJ5YTN6dk05L21M
|
||||
Z3Z3L1RTYkZteURhait0d3JWcGgzdjgKLS0tIFVEZWx6di80QjdSa0NxUk9YUGx1
|
||||
R1NzbS95b0tYYkFucjRGbm5XRldZTVEKCxcIdaShlU9sC+g9RYhbpylj0RLqHsbF
|
||||
FWFls37I4qykCxXqgtYFDT+RvyJ4ZmSrNzhRTgLIW1efyLT7vzpDyQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:13Z"
|
||||
mac: ENC[AES256_GCM,data:nV9q1TLwHuoqdoA+jagAnCIq+4B0E5IIRjVAG1KJM13rTenMw9pyPbb+cobIH9CcLM5XPHB3CcNwzObGb+6lubthVBEk/ymtp4/yqirFC6jnWoaioPaRxzB614Ie0llu2Bkj1lgfwl3cJfl38SJekiDgjTaDIVlnXhkCsJUBMas=,iv:2/nlMgeyuYwfRRDYnfYAVgHWVdy7rSzHDrCrbU38Ka8=,tag:dikrT5u776YViDxQ5VC0Ww==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
@@ -0,0 +1,3 @@
|
||||
# Install directly from repo:
|
||||
|
||||
kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.14.9/config/manifests/metallb-native.yaml
|
||||
@@ -0,0 +1,57 @@
|
||||
apiVersion: metallb.io/v1beta1
|
||||
kind: IPAddressPool
|
||||
metadata:
|
||||
name: 1st-pool
|
||||
namespace: metallb-system
|
||||
spec:
|
||||
addresses:
|
||||
- ENC[AES256_GCM,data:nxZ6Q4oTJweWareSNTASaq5CDXq9oqj0giOV,iv:YCTfjMWcdFIZzuHxV2JAZii8XZsnaP6FQj34pR9U0a0=,tag:0aWTKWI1ckNWd88MqyvwuA==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQa0lNZWxnOTZxRUdVWFZG
|
||||
b1B5WTZXT3RLZ2Z1RGNERm9qMmhKYWd3SXpjCjVnOHhUVkxwOUZpUDRsQ3Jrd2Q5
|
||||
SnVITlhQcTBSWWtCbnoxbnF4YitVTUEKLS0tIHNCcW5telcyZHdOM0JnZmcyRXhD
|
||||
cHhyMmhVRkVCU0pVWVFodHdOOEdWR0kKkgWbxB4Vy/1wckCba1UHH8yliiRIzoL/
|
||||
cPeQ2bxXf6Hn1EP9rSDGp9B+NJ2fX62L5VLx0QBcmLOJNdYW14xdnw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:7S3vj4gzvtfC6rE3+v+qxKRQbjbHSre9ORLxvMccCJHg78g0fpghxHMT+RDL0ekav/NwSqj7APzoFYddUdB/ahCIXCPOuKsfVVeWX58SMPUHKVU/E9tc7skeYLPxN8ZRl3ZagUg6ppB6S76Lj5BtKKAWtwPKYM3PJLhc90Ol92s=,iv:+Zc1aqMvGV+4PMcNvO+gjbEdnq/DQtRNJD/surXRZWU=,tag:b7apwrhXwbtlqVYJb7Z9IQ==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
---
|
||||
apiVersion: metallb.io/v1beta1
|
||||
kind: L2Advertisement
|
||||
metadata:
|
||||
name: 1st-l2-adv
|
||||
namespace: metallb-system
|
||||
spec:
|
||||
ipAddressPools:
|
||||
- ENC[AES256_GCM,data:wJ4zvKICIWg=,iv:CObRvRRvaVI5WbxU/XEkzyWmxO3/p7N08TGWUHGFbG8=,tag:evIupeFB6R4bw2saNN9BNg==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQa0lNZWxnOTZxRUdVWFZG
|
||||
b1B5WTZXT3RLZ2Z1RGNERm9qMmhKYWd3SXpjCjVnOHhUVkxwOUZpUDRsQ3Jrd2Q5
|
||||
SnVITlhQcTBSWWtCbnoxbnF4YitVTUEKLS0tIHNCcW5telcyZHdOM0JnZmcyRXhD
|
||||
cHhyMmhVRkVCU0pVWVFodHdOOEdWR0kKkgWbxB4Vy/1wckCba1UHH8yliiRIzoL/
|
||||
cPeQ2bxXf6Hn1EP9rSDGp9B+NJ2fX62L5VLx0QBcmLOJNdYW14xdnw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:7S3vj4gzvtfC6rE3+v+qxKRQbjbHSre9ORLxvMccCJHg78g0fpghxHMT+RDL0ekav/NwSqj7APzoFYddUdB/ahCIXCPOuKsfVVeWX58SMPUHKVU/E9tc7skeYLPxN8ZRl3ZagUg6ppB6S76Lj5BtKKAWtwPKYM3PJLhc90Ol92s=,iv:+Zc1aqMvGV+4PMcNvO+gjbEdnq/DQtRNJD/surXRZWU=,tag:b7apwrhXwbtlqVYJb7Z9IQ==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
@@ -0,0 +1,98 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: web
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
|
||||
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
|
||||
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
|
||||
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
|
||||
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: web-server
|
||||
namespace: web
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
app: ENC[AES256_GCM,data:Fg92,iv:wKQN13WRFesAwpf4cH3vpLDbMAsQ8gD3JJrYe+397ig=,tag:VG7kwVtwsqZ7dua5qTcAuQ==,type:str]
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: web
|
||||
spec:
|
||||
containers:
|
||||
- name: ENC[AES256_GCM,data:7bM+kcA=,iv:XLtGp2fg1aOwIiFRDMlsTuJbeLK2DV8JZNhojjwyV6I=,tag:aamUf+aOXpn4cvMiH3wo1A==,type:str]
|
||||
image: ENC[AES256_GCM,data:LKkMTA5PTX1tHoVk,iv:CjKkfXmKFub3r5Bf5XGtOCvbADoD9x/uAvRvsnhB3jc=,tag:4E31cMYQGUGQpI6T46I7fA==,type:str]
|
||||
ports:
|
||||
- containerPort: ENC[AES256_GCM,data:EM4=,iv:Z3QX9Z8GCNr5XW5oo46wrUqparihHlJGMca+my5uhXs=,tag:KtUNgHih/kxyKDA0UjezFA==,type:int]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
|
||||
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
|
||||
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
|
||||
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
|
||||
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: web-server-service
|
||||
namespace: web
|
||||
spec:
|
||||
selector:
|
||||
app: ENC[AES256_GCM,data:aaQy,iv:7tLAmrmkVvplNCdo2k18k8weeEGl8Z827YgBcPzN53s=,tag:UbnNkjtspmvkYSE3dglETw==,type:str]
|
||||
ports:
|
||||
- protocol: ENC[AES256_GCM,data:Nm3j,iv:jj5ojSUW8l/RVCb6Idu3udRTuOZuZ8nhP1SoIe79l/c=,tag:OPdE50txyouCxsRPSdd6IQ==,type:str]
|
||||
port: ENC[AES256_GCM,data:uMY=,iv:BYLFm0rXKpyP80a+/fiTHcimicO33TjgX0N29wrJxvo=,tag:vNRb1oTNhdmP4PLSKI1LUQ==,type:int]
|
||||
targetPort: ENC[AES256_GCM,data:Xew=,iv:O2SkA9bj39lDEbOK1TyN3SC5/ILDdY4niFHaIer7pt0=,tag:tdMMboQzwcl1cECJg1dKvQ==,type:int]
|
||||
type: LoadBalancer
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
|
||||
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
|
||||
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
|
||||
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
|
||||
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
@@ -0,0 +1,16 @@
|
||||
# Helm install:
|
||||
|
||||
# This setup uses the "kube-system" namespace for the pod - seems most appropriate since this is a core functionality for the cluster
|
||||
|
||||
helm repo add nfs-subdir-external-provisioner https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
|
||||
helm install nfs-subdir-external-provisioner nfs-subdir-external-provisioner/nfs-subdir-external-provisioner --set nfs.server=192.168.0.51 --set nfs.path=/mnt/kingston-ssd-nfs/k3s-data -n kube-system
|
||||
kubectl get all -n kube-system
|
||||
|
||||
# You can then test with:
|
||||
|
||||
kubectl create -f https://raw.githubusercontent.com/kubernetes-sigs/nfs-subdir-external-provisioner/master/deploy/test-claim.yaml -f https://raw.githubusercontent.com/kubernetes-sigs/nfs-subdir-external-provisioner/master/deploy/test-pod.yaml
|
||||
|
||||
# which should create a PVC using the "nfs-client" storage class and write a single file to it.
|
||||
# You can the delete the test pod with:
|
||||
|
||||
kubectl delete -f https://raw.githubusercontent.com/kubernetes-sigs/nfs-subdir-external-provisioner/master/deploy/test-claim.yaml -f https://raw.githubusercontent.com/kubernetes-sigs/nfs-subdir-external-provisioner/master/deploy/test-pod.yaml
|
||||
@@ -0,0 +1,3 @@
|
||||
helm upgrade --install ingress-nginx ingress-nginx \
|
||||
--repo https://kubernetes.github.io/ingress-nginx \
|
||||
--namespace kube-system
|
||||
@@ -0,0 +1,7 @@
|
||||
#/bin/bash
|
||||
|
||||
unencrypted_file="$1"
|
||||
encrypted_file="$2"
|
||||
cert_file="$3"
|
||||
|
||||
cat "$1" | kubeseal --cert "$3" --controller-name=sealed-secrets-controller --controller-namespace=kube-system --format yaml > "$2"
|
||||
@@ -0,0 +1,33 @@
|
||||
# Helm install:
|
||||
|
||||
helm repo add sealed-secrets https://bitnami-labs.github.io/sealed-secrets
|
||||
helm repo update
|
||||
helm install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets
|
||||
kubectl get all -n kube-system
|
||||
|
||||
# Extras:
|
||||
|
||||
- install kubeseal utility
|
||||
https://github.com/bitnami-labs/sealed-secrets#installation-from-source
|
||||
|
||||
# For version x86-x64 0.20.1
|
||||
wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.20.1/kubeseal-0.20.1-linux-amd64.tar.gz
|
||||
tar -xvzf kubeseal-0.20.1-linux-amd64.tar.gz kubeseal
|
||||
sudo install -m 755 kubeseal /usr/local/bin/kubeseal
|
||||
|
||||
# For version ARM64 0.20.1
|
||||
wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.20.1/kubeseal-0.20.1-linux-arm.tar.gz
|
||||
tar -xvzf kubeseal-0.20.1-linux-arm.tar.gz kubeseal
|
||||
sudo install -m 755 kubeseal /usr/local/bin/kubeseal
|
||||
|
||||
|
||||
- create a secret from CLI and seal it
|
||||
kubectl create secret generic secret-name --dry-run=client --from-literal=foo=bar -o yaml | \
|
||||
kubeseal \
|
||||
--controller-name=sealed-secrets-controller \
|
||||
--controller-namespace=kube-system \
|
||||
--format yaml > mysealedsecret.yaml
|
||||
|
||||
- save the encryption certificate locally and use it to create sealed secrets
|
||||
kubeseal --fetch-cert >mycert.pem
|
||||
cat mysecret.yaml | kubeseal --cert mycert.pem --controller-name=sealed-secrets-controller --controller-namespace=kube-system --format yaml > mysealedsecret.yaml
|
||||
@@ -0,0 +1,28 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIEzDCCArSgAwIBAgIQRF9LQ+vSfpFGHd9oVobdKzANBgkqhkiG9w0BAQsFADAA
|
||||
MB4XDTIzMDMxODE5MDYzOFoXDTMzMDMxNTE5MDYzOFowADCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAL3J2eroyUcFe7kJ74ggALw/Dq4beZQ3Awo42Zbx
|
||||
QwOtV475fNXA88SSQa50HChsIon2PAuA6kjhaKOuOE2SqbPHD/9/lwv9tMVAZ37e
|
||||
X7qU+t7KaenHjF5tL1+OHrsppCDAVpH1Ku0FmqlKDMx0oGcU38xw0jtLNpdRfGxd
|
||||
ZTrtz+bEL8dUR869H8bYfQTuLEd2akoxaALEBooCMPlaq16dwckj/ecyuEp+Gp9b
|
||||
UM4MDycd7MfZywvLVv4WQRjW9ZwYvdlCq95Y/v47bVfXf5Q6OpKxgltnYy+x46Mw
|
||||
CVo22PXEx9jpqf/F9H+oNKReiebkKOU3LRHT2I9H3itAyeqD5kFr6NOhGqUft1cv
|
||||
6RQu5BC3Hj35i7gtLSKq1uWpj0cnUKLSbAIgu7Bt1PiskMLQx80V0BElzUtD3oAu
|
||||
tnLA9wdnvNaMWzah6jr1ekUkgs7v4GBE7uu4SPODTiY4CEbiRUB1yOuGUAr8McVX
|
||||
jGTXs/n3zLURtvRag6j4hQ3DejWBtiaUXOh88wU8GLyDaReWEd4073dMj8UT06X6
|
||||
WvIoj9LKHDnQVyuUit7CM4VKfoRDS5cj40G8bbgDjO8+4iEPGRD0ZnjrG/1RqakD
|
||||
Q8xR9VQRWCk32F9sVPQ2glgJKrwi8dVv3FC2lxCfnSzxetRfWkHhQRIbaACh2SWD
|
||||
6x6XAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIAATAPBgNVHRMBAf8EBTADAQH/MB0G
|
||||
A1UdDgQWBBRXNFKCOfqIOnh4VdhYUR5cjLXPYjANBgkqhkiG9w0BAQsFAAOCAgEA
|
||||
dqRMVl9TWroYyX7L65CGPJj4YtXdoFwtlC7V9UL4bMEVwIxWTYJa7vsUiQI7N+DY
|
||||
+YQKYOFmZwxISvnC9lYjPhfIG/1nIFZjJI3akc+FPy8F8WdYvorqAaZ+zWd7F5tF
|
||||
Jd1vNfBBUv0Ku4mUIcUuCFEhGIfbMhWKysipui6IT3RX60nq7ld/EeUt2p4oHwAk
|
||||
1Qu92/HATjzNgDEj7reOJLUBQE+rEe9qgK5d4LReSIA0ew9f58qawOpmzrDHJx8R
|
||||
WIlPAcqDHlr9cPbkjLr+Rt00nLGU9d7acteS9pJGIFqyhucaGostOLwhd3XXp7Ok
|
||||
FMmvnPR5WivF3d1Y2kzep6NK2gyiOmvJqLvSUagDb5+yYko/N4oLjjJt8+AY/19K
|
||||
SCmsxDMzezbtToqlPSElfxuOA5p3Rpd0YcKAC+IqxVRaxjkfrQv87go1S0zanbqz
|
||||
FUMwQ60HmFK4W3ujj3n4hbVzaV9y/KEEVqfNSpAq2e3Qr+dYIDBrg9WFWuKlmnRB
|
||||
Zdoy4IpoEclgn0aQutkbjrxrzz4YLXftR4uQFRYpjr5Cj2cqq90tFrkAXetGqZtv
|
||||
eOeqpjzCCZh9vSGX4hntmqLxF4eIQcka/U6cyPEyg8xyhLoOsWXVPqu3LIrpMPV2
|
||||
bJ40Kcwb+AqWtWPD89u26slH3DDZg+2ZtQVyYbnosnI=
|
||||
-----END CERTIFICATE-----
|
||||
@@ -0,0 +1,26 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: secret-sample
|
||||
data:
|
||||
SOME_DATA: ENC[AES256_GCM,data:jBXRuM+n2aT2vRjdjPYajwpGI4GejOp+tRjJ,iv:RhEU810grC51TXJ0PMyWv7MVZwdRCXjyXamDrL+ctLE=,tag:2WHd8qRQW8DqJY+ro5H65A==,type:str]
|
||||
sops:
|
||||
kms: []
|
||||
gcp_kms: []
|
||||
azure_kv: []
|
||||
hc_vault: []
|
||||
age:
|
||||
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
||||
enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWEN6T3dyWkNzdnFXK05q
|
||||
NDg3THRaQUcwdmZscVFxR1NLTkZpZ2ZvWHdNCmlQbUZodHVJRGxzTloxdVFrMGZk
|
||||
TkxicW1hTWxFSk91Rm9pOENZWDFtd2cKLS0tIG8rT1pNMUpNWHhZYTdTRmp4clph
|
||||
aVVqT2dKV2phc0wzaHU3VG5laER5Vm8Ks79btunKyU1lyMMfaZGjiE1Uz10/J3Hr
|
||||
Zk2nsinZanRwXC3Te4iVWYatMmUKdD0kFCZAkUDcHJNRZGXcC9qBXg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-06-21T20:34:14Z"
|
||||
mac: ENC[AES256_GCM,data:/M7yFH74GWawrtbQ/KEkdE2mU0DQk7YtLPFNnMe3c+VqFfhhWG5EkuvZm3FF0ZsxfdMMhZI4Cn+i56zL+bJZEX0+8HtSk2JP6gjrWV/+OvA0ue76yrX/laNlXm8nyR5J0HzzOytAzOzZoJ8UgT81fmOQBesOQTcEncoMYxUScaI=,iv:OOTRLKcZTOQGrSODlEy8Gx9snRehYuRYsFfZ602eIrY=,tag:8NdJObqcbPsXRWgsK4b/bQ==,type:str]
|
||||
pgp: []
|
||||
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
||||
version: 3.9.1
|
||||
Reference in New Issue
Block a user