Handling secrets in kubernetes using git secrets

on YouTube ↗17m

" summary

Shows a working setup that uses git-secret + GPG to store encrypted credentials in a git repo and a set of bash helper scripts to generate and push Kubernetes secrets, mount them into pods, and trigger updates. Claims successful operation with about ~100 secrets (decrypt time scales up) and no hosted service, using the repo as the single source of truth. Limits: must re-encrypt edited files, no API for push notifications, and no hosted API.

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 0:10About me
3. 0:41Agenda
4. 1:14Understanding the problem
5. 2:15Requirements
6. 3:19Solution
7. 4:27Key Management
8. 4:51Demo
9. 6:10Adding secrets
10. 7:59Interacting with kubernetes
11. 14:35Pros Cons
12. 16:33Outro

" related talks

• 29mSecuring secrets in the GitOps eraDavide Imola · devsecopsday 2023
• 43mSecuring Secrets in the GitOps EraAlex Soto · JCON Europe 2023
• 46mSecuring Secrets in the GitOps eraAlex Soto · DevOps Barcelona Conference 2023
• 29m100,000 Different Ways to Manage Secrets in GitOpsAndrew Block · GitOpsCon Europe 2022
• 24mUnlocking the Secrets to Effective Secrets Management in GitOpsKunal Verma · GitOpsCon Europe 2023
• 26mSecret Management in Kubernetes: The GitOps Way - Benjamin RitterBenjamin Ritter · ContainerDays 2023
• 30mLook Ma, No secrets in my Kubernetes Cluster! - Vijay DharapVijay Dharap · ContainerDays 2023
• 27mGitOps, Kubernetes, and Secret Management: Don't Bake in a Tent!Kara de la Marck · cdCon 2020