Fresh repo - removed all old commits

2025-06-21 21:36:29 +01:00
commit 6fa64414f8
99 changed files with 35021 additions and 0 deletions
@@ -0,0 +1,7 @@
+#/bin/bash
+
+unencrypted_file="$1"
+encrypted_file="$2"
+cert_file="$3"
+
+cat "$1" | kubeseal --cert "$3" --controller-name=sealed-secrets-controller --controller-namespace=kube-system --format yaml > "$2"
@@ -0,0 +1,33 @@
+# Helm install:
+
+helm repo add sealed-secrets https://bitnami-labs.github.io/sealed-secrets
+helm repo update
+helm install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets
+kubectl get all -n kube-system
+
+# Extras:
+
+- install kubeseal utility
+https://github.com/bitnami-labs/sealed-secrets#installation-from-source
+
+    # For version x86-x64 0.20.1
+    wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.20.1/kubeseal-0.20.1-linux-amd64.tar.gz
+    tar -xvzf kubeseal-0.20.1-linux-amd64.tar.gz kubeseal
+    sudo install -m 755 kubeseal /usr/local/bin/kubeseal
+
+    # For version ARM64 0.20.1
+    wget https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.20.1/kubeseal-0.20.1-linux-arm.tar.gz
+    tar -xvzf kubeseal-0.20.1-linux-arm.tar.gz kubeseal
+    sudo install -m 755 kubeseal /usr/local/bin/kubeseal
+
+
+- create a secret from CLI and seal it
+kubectl create secret generic secret-name --dry-run=client --from-literal=foo=bar -o yaml | \
+kubeseal \
+    --controller-name=sealed-secrets-controller \
+    --controller-namespace=kube-system \
+    --format yaml > mysealedsecret.yaml
+
+- save the encryption certificate locally and use it to create sealed secrets
+kubeseal --fetch-cert >mycert.pem
+cat mysecret.yaml | kubeseal --cert mycert.pem --controller-name=sealed-secrets-controller --controller-namespace=kube-system --format yaml > mysealedsecret.yaml
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----
+MIIEzDCCArSgAwIBAgIQRF9LQ+vSfpFGHd9oVobdKzANBgkqhkiG9w0BAQsFADAA
+MB4XDTIzMDMxODE5MDYzOFoXDTMzMDMxNTE5MDYzOFowADCCAiIwDQYJKoZIhvcN
+AQEBBQADggIPADCCAgoCggIBAL3J2eroyUcFe7kJ74ggALw/Dq4beZQ3Awo42Zbx
+QwOtV475fNXA88SSQa50HChsIon2PAuA6kjhaKOuOE2SqbPHD/9/lwv9tMVAZ37e
+X7qU+t7KaenHjF5tL1+OHrsppCDAVpH1Ku0FmqlKDMx0oGcU38xw0jtLNpdRfGxd
+ZTrtz+bEL8dUR869H8bYfQTuLEd2akoxaALEBooCMPlaq16dwckj/ecyuEp+Gp9b
+UM4MDycd7MfZywvLVv4WQRjW9ZwYvdlCq95Y/v47bVfXf5Q6OpKxgltnYy+x46Mw
+CVo22PXEx9jpqf/F9H+oNKReiebkKOU3LRHT2I9H3itAyeqD5kFr6NOhGqUft1cv
+6RQu5BC3Hj35i7gtLSKq1uWpj0cnUKLSbAIgu7Bt1PiskMLQx80V0BElzUtD3oAu
+tnLA9wdnvNaMWzah6jr1ekUkgs7v4GBE7uu4SPODTiY4CEbiRUB1yOuGUAr8McVX
+jGTXs/n3zLURtvRag6j4hQ3DejWBtiaUXOh88wU8GLyDaReWEd4073dMj8UT06X6
+WvIoj9LKHDnQVyuUit7CM4VKfoRDS5cj40G8bbgDjO8+4iEPGRD0ZnjrG/1RqakD
+Q8xR9VQRWCk32F9sVPQ2glgJKrwi8dVv3FC2lxCfnSzxetRfWkHhQRIbaACh2SWD
+6x6XAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIAATAPBgNVHRMBAf8EBTADAQH/MB0G
+A1UdDgQWBBRXNFKCOfqIOnh4VdhYUR5cjLXPYjANBgkqhkiG9w0BAQsFAAOCAgEA
+dqRMVl9TWroYyX7L65CGPJj4YtXdoFwtlC7V9UL4bMEVwIxWTYJa7vsUiQI7N+DY
+YQKYOFmZwxISvnC9lYjPhfIG/1nIFZjJI3akc+FPy8F8WdYvorqAaZ+zWd7F5tF
+Jd1vNfBBUv0Ku4mUIcUuCFEhGIfbMhWKysipui6IT3RX60nq7ld/EeUt2p4oHwAk
+1Qu92/HATjzNgDEj7reOJLUBQE+rEe9qgK5d4LReSIA0ew9f58qawOpmzrDHJx8R
+WIlPAcqDHlr9cPbkjLr+Rt00nLGU9d7acteS9pJGIFqyhucaGostOLwhd3XXp7Ok
+FMmvnPR5WivF3d1Y2kzep6NK2gyiOmvJqLvSUagDb5+yYko/N4oLjjJt8+AY/19K
+SCmsxDMzezbtToqlPSElfxuOA5p3Rpd0YcKAC+IqxVRaxjkfrQv87go1S0zanbqz
+FUMwQ60HmFK4W3ujj3n4hbVzaV9y/KEEVqfNSpAq2e3Qr+dYIDBrg9WFWuKlmnRB
+Zdoy4IpoEclgn0aQutkbjrxrzz4YLXftR4uQFRYpjr5Cj2cqq90tFrkAXetGqZtv
+eOeqpjzCCZh9vSGX4hntmqLxF4eIQcka/U6cyPEyg8xyhLoOsWXVPqu3LIrpMPV2
+bJ40Kcwb+AqWtWPD89u26slH3DDZg+2ZtQVyYbnosnI=
+-----END CERTIFICATE-----
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: secret-sample
+data:
+    SOME_DATA: ENC[AES256_GCM,data:jBXRuM+n2aT2vRjdjPYajwpGI4GejOp+tRjJ,iv:RhEU810grC51TXJ0PMyWv7MVZwdRCXjyXamDrL+ctLE=,tag:2WHd8qRQW8DqJY+ro5H65A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWEN6T3dyWkNzdnFXK05q
+            NDg3THRaQUcwdmZscVFxR1NLTkZpZ2ZvWHdNCmlQbUZodHVJRGxzTloxdVFrMGZk
+            TkxicW1hTWxFSk91Rm9pOENZWDFtd2cKLS0tIG8rT1pNMUpNWHhZYTdTRmp4clph
+            aVVqT2dKV2phc0wzaHU3VG5laER5Vm8Ks79btunKyU1lyMMfaZGjiE1Uz10/J3Hr
+            Zk2nsinZanRwXC3Te4iVWYatMmUKdD0kFCZAkUDcHJNRZGXcC9qBXg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:14Z"
+    mac: ENC[AES256_GCM,data:/M7yFH74GWawrtbQ/KEkdE2mU0DQk7YtLPFNnMe3c+VqFfhhWG5EkuvZm3FF0ZsxfdMMhZI4Cn+i56zL+bJZEX0+8HtSk2JP6gjrWV/+OvA0ue76yrX/laNlXm8nyR5J0HzzOytAzOzZoJ8UgT81fmOQBesOQTcEncoMYxUScaI=,iv:OOTRLKcZTOQGrSODlEy8Gx9snRehYuRYsFfZ602eIrY=,tag:8NdJObqcbPsXRWgsK4b/bQ==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1