Sealed-secrets Alternatives

Reviews and mentions

• How can I encrypt data in a ConfigMap?
  3 projects | reddit.com/r/kubernetes | 16 Jan 2022

  Firstly for sensitive data I would use a secret which is base64 encode. To encrypt the encoded data I would look at using SOPS https://github.com/mozilla/sops. Using Sealed Secrets https://github.com/bitnami-labs/sealed-secrets is another option also

• Top 200 Kubernetes Tools for DevOps Engineer Like You
  84 projects | dev.to | 15 Jan 2022

  kops - Production Grade K8s Installation, Upgrades, and Management silver-surfer - Check ApiVersion compatibility and provide Migration path for Kubernetes objects when upgrading Kubernetes to latest versions Kube-ops-view - Kubernetes Operational View - read-only system dashboard for multiple K8s clusters kubeprompt - Kubernetes prompt info Metalk8s - An opinionated Kubernetes distribution with a focus on long-term on-prem deployments kind - Kubernetes IN Docker - local clusters for testing Kubernetes Clusterman - Cluster Autoscaler for Kubernetes and Mesos Cert-manager - Automatically provision and manage TLS certificates Goldilocks - Get your resource requests "Just Right" katafygio - Dump, or continuously backup Kubernetes objets as yaml files in git Rancher - Complete container management platform Sealed Secrets - A Kubernetes controller and tool for one-way encrypted Secrets OpenKruise/Kruise - Automate application workloads management on Kubernetes https://openkruise.io kubectl snapshot - Take Cluster Snapshots kapp - simple deployment tool focused on the concept of "Kubernetes application" — a set of resources with the same label https://get-kapp.io keda - Event-driven autoscaler for Kubernetes Octant - To better understand the complexity of Kubernetes clusters Portainer - Portainer inside a Kubernetes environment Gardener - Deliver fully-managed clusters at scale everywhere with your own Kubernetes-as-a-Service Kubed - Kubernetes Cluster Operator Daemon Kubestack - Kubestack is the free and open-source GitOps framework to codify your custom platform stack using Terraform.

• Raspberry Pi K3s Cluster
  3 projects | dev.to | 1 Jan 2022

  My first approach to keeping secrets versioned was using Sealed Secrets. However, I gave up on the sealed secrets because I rebuilt the cluster frequently and always lost the encryption keys since I didn't care to make backups. I found it a lot easier to keep an encrypted secrets.yaml file in the repository. Every time I spin up a new cluster in this workflow, I have to decrypt the file and apply it to the new cluster. Although it is encrypted, I don't recommend keeping the file in a public Github repository. I'm doing this to avoid losing the secrets while I work out a better flow for personal projects.

• Where to keep the yaml files
  4 projects | reddit.com/r/kubernetes | 26 Dec 2021

  And use sops, ansible-vault or bitnami sealed secrets, and you can even safely store encrypted configurations in version control

• I have sensitive information in my ConfigMap. How can I secure it.
  4 projects | reddit.com/r/kubernetes | 20 Dec 2021

  Alternatively, you can also explore SealedSecrets.

  4 projects | reddit.com/r/kubernetes | 20 Dec 2021

  There are some options. Hope this will do https://github.com/bitnami-labs/sealed-secrets

• Gotta love gitops
  3 projects | reddit.com/r/kubernetes | 16 Dec 2021

  you can use hashicorp vault for it, but for start you can use sealed-secrets

• Automating Creation of Bitnami Sealed Secrets
  1 project | reddit.com/r/devops | 8 Dec 2021

  I've been using Bitnami Sealed Secrets (https://github.com/bitnami-labs/sealed-secrets) for a while now and have created a script that will take a file as an input and generate a sealed secret to be deployed into the cluster from the input file.

• How to securely reference secrets in a Secret yaml file?
  2 projects | reddit.com/r/kubernetes | 5 Dec 2021

  There are various tools out there using different ways to tackle secrets management for k8s. You can store them encrypted in git (e.g. https://github.com/bitnami-labs/sealed-secrets), use a secret management engine and insert your secrets using a secrets operator ( e.g. https://external-secrets.io/ - here you would store a CRD describing how to mount nt the secret) or use CSI implementations to mount secrets directly from your secrets provider in your pod (e.g. https://www.vaultproject.io/docs/platform/k8s/csi ).

  2 projects | reddit.com/r/kubernetes | 5 Dec 2021
• How to pass credentials to my app?
  3 projects | reddit.com/r/GitOps | 5 Dec 2021

  There are many way to do that. One of the simplest is using the Binami Sealed Secrets controller https://github.com/bitnami-labs/sealed-secrets

• Building a "complete" cluster locally
  24 projects | reddit.com/r/kubernetes | 31 Oct 2021

  Ideas from my kubernetes experience: * Cert-Manager is very popular and almost a must-have if you terminate SSL inside the cluster * Backups using velero * A dashboard/UI is actually very helpful to quickly browse resources, client tools like k9s are fine too * Secret: Management: Bitnami Sealed Secrets is the second big project in that space * I would add Loki to aggregate Logs * Never heard of ory. Usually I see (dex)[https://dexidp.io/] or keycloak used for Authentication * I like to run OpenEBS as in-cluster storage. * Istio isn't compatible with the upcomming ServiceMeshInterface (i think), so the trend seem to go toward Linkerd * Some Operator to deploy your favorite Database, is also a nice learning exercise.

• Kubernetes Security Checklist 2021
  28 projects | dev.to | 18 Oct 2021

  Secrets should be added to the container using the volumeMount mechanism or the secretKeyRef mechanism. For hiding secrets in source codes, for example, the sealed-secret tool can be used.

• Self-managed Argo-cd boilerplate (with secrets for private/public repo use)
  2 projects | reddit.com/r/devops | 16 Oct 2021

  kubeseal (sealed-secrets)

• How to Handle Secrets Like a Pro Using Gitops
  2 projects | dev.to | 3 Sep 2021

  Secret rotation is a complex process that should not be taken lightly. We have explained the basics of Sealed Secrets in this article, but if you want to use the controller in production you need to read the documentation and take into account other aspects such as secret rotation and key handling.