What is the primary benefit of using Sealed Secrets?

It allows you to store sensitive configuration data in your Git repository by encrypting it so that only the controller in your Kubernetes cluster can decrypt it.

How does this skill handle unreachable controllers?

The skill includes a pre-configured port-forwarding workflow to access the sealed-secrets-controller service and fetch the required encryption certificate.

What should I do if the secret already exists in the cluster?

The skill provides troubleshooting steps, such as deleting the unmanaged secret before applying the SealedSecret manifest to resolve ownership conflicts.

Can I use this for Docker registry secrets?

Yes, the skill provides specific templates and commands for creating and sealing dockerconfigjson secrets for registries like GHCR.

Kubernetes Sealed Secrets Generator

Name: Kubernetes Sealed Secrets Generator
Author: aaronwald

byaaronwald

セキュリティとテスト

Automates the creation and encryption of Kubernetes Sealed Secrets for secure storage in Git repositories.

概要

This skill empowers developers to manage sensitive Kubernetes data securely by facilitating the conversion of standard Secrets into Bitnami SealedSecrets. It handles complex workflows, including certificate retrieval via port-forwarding for restricted network environments, support for various secret types like Opaque, Docker registry, and TLS, and provides troubleshooting guidance for common synchronization issues. By using this skill, teams can safely implement GitOps practices without exposing plaintext credentials in their source control.

主な機能

Supports multiple secret types including Opaque, Docker registry (GHCR), and TLS certificates.
0 GitHub stars
Provides built-in network workarounds for fetching controller certificates via port-forwarding.
Ensures GitOps compliance by enabling safe commitment of sensitive data to repositories.
Converts Kubernetes Secret manifests into encrypted SealedSecrets.
Includes troubleshooting guides for common encryption and synchronization errors.

ユースケース

Updating environment-specific secrets within a Flux or ArgoCD managed infrastructure.
Managing Docker registry authentication for automated image pulling in Kubernetes clusters.
Safely committing database credentials and API keys to a public or private Git repository.

概要

主な機能

Supports multiple secret types including Opaque, Docker registry (GHCR), and TLS certificates.
0 GitHub stars
Provides built-in network workarounds for fetching controller certificates via port-forwarding.
Ensures GitOps compliance by enabling safe commitment of sensitive data to repositories.
Converts Kubernetes Secret manifests into encrypted SealedSecrets.
Includes troubleshooting guides for common encryption and synchronization errors.

ユースケース

Updating environment-specific secrets within a Flux or ArgoCD managed infrastructure.
Managing Docker registry authentication for automated image pulling in Kubernetes clusters.
Safely committing database credentials and API keys to a public or private Git repository.