bitnami/sealed-secrets
View on GitHub ↗ ★ 9,328 Go
A Kubernetes controller and tool for one-way encrypted Secrets
12 mentions on Hacker News by 9 people: 2 stories, 10 comments · first 2019-12-11 · latest 2024-04-25
20082026
-
I like sealed secrets ( https://github.com/bitnami-labs/sealed-secrets ) a lot. It's like 1Password, but for apps in kubernetes. You only need to secure a private key, and can throw encrypted secrets in a public github repo or anywhere you…
comment by zzyzxd · 2024-04-25 · in Show HN: Open-source alternative to HashiCorp/IBM Vault -
…the items) The main problem with case 2 is that it's undocumented. The feature landed in 2021: https://github.com/bitnami-labs/sealed-secrets/pull/580 I noticed that people at my current $dayjob used sealed secrets for years and it took me…
comment by ithkuil · 2023-07-21 · in Plain Kubernetes Secrets are fine -
…Virtually every orchestration tool has some way to support it. E.g. k8s sealed secrets https://github.com/bitnami-labs/sealed-secrets E.g. Salt's GPG filters https://docs.saltproject.io/en/latest/ref/renderers/all/salt... E.g. Ansible…
comment by morelisp · 2022-03-04 · in A GitHub repository was public-viewable -
…which allow us to asym encrypt our secrets to the cluster's key, the we can just stick them in git. https://github.com/bitnami-labs/sealed-secrets
comment by anotherhue · 2021-07-04 · in Secret Management in Kubernetes -
I found the bug: https://github.com/bitnami-labs/sealed-secrets/issues/398 — it's actually an empty Issuer DN. Seems like it was recently fixed too, which is nice. Now I'll have to find a way to upgrade…
comment by deathanatos · 2021-06-02 · in W3.org Cert Expired -
If you're still interested in something similar tailored for kubernetes, take a look at https://github.com/bitnami-labs/sealed-secrets
comment by ithkuil · 2020-12-08 · in Simple and flexible tool for managing secrets -
…using it a joy) 3. Sealed Secrets (less experience here but it's looking positive right now) - https://github.com/bitnami-labs/sealed-secrets If you're using a different PaaS besides OpenShift, it may also offer options worth considering…
comment by freedomben · 2020-10-14 · in Dockerfile Security Best Practices -
Shameless plug for a k8s oriented tool that fits this space: https://github.com/bitnami-labs/sealed-secrets
comment by ithkuil · 2020-06-12 · in Best practices for managing and storing secrets like API keys and credentials -
…secret management use cases here is an alternative, "gitops" friendly, low "config footprint" tool: https://github.com/bitnami-labs/sealed-secrets
comment by ithkuil · 2020-01-24 · in Google Cloud’s Secrets Manager -
…for storing secrets in git repositories. In the future, I'll probably switch to this, though: https://github.com/bitnami-labs/sealed-secrets
comment by jrockway · 2019-12-11 · in Keybase cancels Stellar token airdrop