Bitnami SealedSecrets for Kubernetes

Encrypting the Kubernetes Secrets for the real world. We have Bitnami-Lab SealedSecrets. SealedSecrets provide a way to manage Kubernetes secrets by staying in the framework of GitOps and making your sensitive data secure for the real world.

Encrypting the Kubernetes Secrets for the real world.

Kubernetes has its own way of managing the sensitive data — “Kubernetes Secrets”. However, these Secrets are not really efficient to manage sensitive information in the ‘wild west’. Also, plain secret management in Kubernetes challenges the GitOps way for Kubernetes. Here are 2 major challenges of native Kubernetes Secrets -

1. K8s Secrets itself — These Secrets are not really Secrets. They are just Base64 encoded and hence they can be easily decoded.
2. GitOps Hurdle — GitOps dictates us to store everything in Git. If you manage Secrets outside Git then it breaks the rule of GitOps.

Many tools like Hashicorp Vault are popular amongst folks to manage the Kubernetes Secrets. But again they do not obey the “Laws of GitOps”

SealedSecret by Bitnami —

In order to solve the challenges mentioned above, we have Bitnami-Lab SealedSecrets. SealedSecrets provide a way to manage Kubernetes secrets by staying in the framework of GitOps and making your sensitive data secure for the real world.

The Secrets generated by SealedSecrets can only be decrypted by the controller running inside the target cluster. Hence, you can keep your Secrets in Git, in fact, you can keep it in the public repo as well.

Now,SealedSecrets is composed of two parts:

• A cluster-side controller/operator — to decrypt the SealedSecretsinto regular Kubernetes secrets. Only this controller can decrypt SealedSecrets(not even the original author).
• A client-side utility: to encrypt to secrets — kubeseal

gitops devops kubernetes bitnami

Our original Kubernetes tool list was so popular that we've curated another great list of tools to help you improve your functionality with the platform.

DevOps and Cloud computing are joined at the hip, now that fact is well appreciated by the organizations that engaged in SaaS cloud and developed applications in the Cloud. During the COVID crisis period, most of the organizations have started using cloud computing services and implementing a cloud-first strategy to establish their remote operations. Similarly, the extended DevOps strategy will make the development process more agile with automated test cases.

What is DevOps? How are organizations transitioning to DevOps? Is it possible for organizations to shift to enterprise DevOps? Read more to find out!

What is DevOps? What are the goals it helps achieves? What are its benefits? This article has answers!

The year 2020 has arrived, and its arrival brings a lot of innovations and transformations in the Information and Technology (IT) sector to DevOps technologies.