Sealed Secrets¶

CommandResult

Create a Sealed Secret

kubectl create secret generic <NAME> \
--namespace <NAMESPACE> \
--from-literal=<SECRET_KEY>=<SECRET_VALUE> \
--dry-run=client -o yaml \
| kubeseal --controller-namespace flux-system --format yaml \
> <OUTPUT_FILE>.yaml

sealed-secret.yaml

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: <NAME>
namespace: <NAMESPACE>
spec:
encryptedData:
    <SECRET_KEY>: <ENCRYPTED_VALUE>
template:
    metadata:
    name: <NAME>
    namespace: <NAMESPACE>