Secrets in ArgoCD with Sops

• sops

  150 15,114 9.0 Go

  Simple and flexible tool for managing secrets

  

server: config: configManagementPlugins: | - name: sops init: command: ["/bin/sh", "-c"] args: ["echo '---' > secrets.yaml && sops -d --input-type yaml --output-type yaml secrets.enc >> secrets.yaml"] generate: command: ["/bin/sh", "-c"] args: ["source /virtualenv-python/bin/activate; pip install yq; cat *.yaml | yq -y"] repoServer: volumes: - name: custom-tools emptyDir: {} - name: virtualenv-python emptyDir: {} - name: google-sa secret: secretName: google-sa items: - key: sa.json path: sa.json volumeMounts: - mountPath: /usr/local/bin/sops name: custom-tools subPath: sops - mountPath: /usr/local/bin/jq name: custom-tools subPath: jq - mountPath: /etc/secrets/sa.json name: google-sa subPath: sa.json - mountPath: /virtualenv-python name: virtualenv-python env: - name: GOOGLE_APPLICATION_CREDENTIALS value: /etc/secrets/sa.json initContainers: - name: custom-tools image: alpine:3.8 command: ["/bin/sh", "-c"] args: - wget https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux.amd64; chmod a+x sops-v3.7.3.linux.amd64; mv sops-v3.7.3.linux.amd64 /custom-tools/sops; wget https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64; chmod a+x jq-linux64; mv jq-linux64 /custom-tools/jq; volumeMounts: - mountPath: /custom-tools name: custom-tools - name: virtualenv-python image: python:3.7 command: ["/bin/sh", "-c"] args: - python3 -m venv /virtualenv-python volumeMounts: - mountPath: /virtualenv-python name: virtualenv-python

• jq

  306 25,063 0.0 C

  Discontinued Command-line JSON processor [Moved to: https://github.com/jqlang/jq] (by stedolan)

  

server: config: configManagementPlugins: | - name: sops init: command: ["/bin/sh", "-c"] args: ["echo '---' > secrets.yaml && sops -d --input-type yaml --output-type yaml secrets.enc >> secrets.yaml"] generate: command: ["/bin/sh", "-c"] args: ["source /virtualenv-python/bin/activate; pip install yq; cat *.yaml | yq -y"] repoServer: volumes: - name: custom-tools emptyDir: {} - name: virtualenv-python emptyDir: {} - name: google-sa secret: secretName: google-sa items: - key: sa.json path: sa.json volumeMounts: - mountPath: /usr/local/bin/sops name: custom-tools subPath: sops - mountPath: /usr/local/bin/jq name: custom-tools subPath: jq - mountPath: /etc/secrets/sa.json name: google-sa subPath: sa.json - mountPath: /virtualenv-python name: virtualenv-python env: - name: GOOGLE_APPLICATION_CREDENTIALS value: /etc/secrets/sa.json initContainers: - name: custom-tools image: alpine:3.8 command: ["/bin/sh", "-c"] args: - wget https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux.amd64; chmod a+x sops-v3.7.3.linux.amd64; mv sops-v3.7.3.linux.amd64 /custom-tools/sops; wget https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64; chmod a+x jq-linux64; mv jq-linux64 /custom-tools/jq; volumeMounts: - mountPath: /custom-tools name: custom-tools - name: virtualenv-python image: python:3.7 command: ["/bin/sh", "-c"] args: - python3 -m venv /virtualenv-python volumeMounts: - mountPath: /virtualenv-python name: virtualenv-python

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• manifests

  1 - -

apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name: secrets namespace: argocd spec: project: default source: repoURL: https://github.com/Callepuzzle/manifests targetRevision: main path: poc-argocd plugin: name: sops destination: name: '' namespace: '' server: 'https://kubernetes.default.svc'

Suggest a related project