浏览代码

Secret encrypted with correct key

Simon Kaiser 3 年前
父节点
当前提交
9b7a3f9c73
共有 2 个文件被更改,包括 13 次插入17 次删除
  1. 11
    15
      README.md
  2. 2
    2
      gitops-kaisers-info/templates/argocd-kaisers-info-secrets-sealed.yaml

+ 11
- 15
README.md 查看文件

@@ -16,16 +16,24 @@ curl -sfL https://get.k3s.io | sh -s - server --disable local-storage
16 16
 kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml
17 17
 ```
18 18
 
19
+### ArgoCD
19 20
 ```
20
-kubectl apply -k https://github.com/argoproj/argo-cd/manifests/crds\?ref\=stable
21
+helm install -n argocd argo-cd argo/argo-cd --create-namespace
22
+// Currently not unused: kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj-labs/applicationset/v0.3.0/manifests/install.yaml
23
+kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
21 24
 ```
22 25
 
23 26
 ### Cluster
24 27
 ```
25
-kubectl create namespace argocd
26 28
 kubectl apply -f application-cluster-kaisers-info.yaml
27 29
 ```
28 30
 
31
+### GitOps
32
+```
33
+kubectl apply -f application-gitops-kaisers-info.yaml
34
+```
35
+
36
+
29 37
 #### Sealed-Secrets
30 38
 ##### Own Certificates
31 39
 https://github.com/bitnami-labs/sealed-secrets/blob/main/docs/bring-your-own-certificates.md
@@ -47,23 +55,11 @@ kubectl -n "$NAMESPACE" delete pod -l name=app.kubernetes.io/name=sealed-secrets
47 55
 
48 56
 echo -n "PASSWORD" \
49 57
     | kubectl create secret generic xxx --dry-run=client --from-file=KEY=/dev/stdin -o yaml \
50
-    | kubeseal --controller-namespace=sealed-secrets --controller-name=sealed-secrets --format yaml --merge-into ./secrets/authentik-kaisers-info-automated-install-sealed.yaml
58
+    | kubeseal --cert "./${PUBLICKEY}" --controller-namespace=sealed-secrets --controller-name=sealed-secrets --format yaml --merge-into ./secrets/authentik-kaisers-info-automated-install-sealed.yaml
51 59
 
52 60
 kubectl apply -f sealed-secret.yaml
53 61
 ```
54 62
 
55
-### GitOps
56
-```
57
-kubectl apply -f application-gitops-kaisers-info.yaml
58
-```
59
-
60
-### ArgoCD
61
-```
62
-helm install -n argocd argo-cd argo/argo-cd --create-namespace
63
-// Currently not unused: kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj-labs/applicationset/v0.3.0/manifests/install.yaml
64
-kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
65
-```
66
-
67 63
 ## Services
68 64
 ### Services
69 65
 kubectl apply -f application-services-kaisers-info.yaml

+ 2
- 2
gitops-kaisers-info/templates/argocd-kaisers-info-secrets-sealed.yaml 查看文件

@@ -11,8 +11,8 @@ metadata:
11 11
   namespace: argocd
12 12
 spec:
13 13
   encryptedData:
14
-    oidc.auth0.clientID: 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
15
-    oidc.auth0.clientSecret: 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
14
+    oidc.auth0.clientID: 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
15
+    oidc.auth0.clientSecret: AgALCdtxV0+yAm1mZ1VdtlL8HmQTMU67p6xFctMynAvanvWokWfSjD/4Ly+cIGhiL8ke0K/dqeew4If62jJV2x9rTbQ3DlGgtH//EfzL3Q1sJHDpiFsX0dg79lgsgF2rE+zBe2gb7hmmtrzuNBun0sdeiwidj4jaOShv09/ebAIkjWeQtvIUAhj1NPuLgKPoo8RYANjlWToPJkAQ5Dep0yE2SHp+OonjQoGfrmHrk/6QI9etT581xpj4EK8Ev5h2IppBrCnQijyg97OHXlDNVoOBcQemsKMWi4pi7JVkFzTcnCIk6VR2dIMU4+NuLwAY2zMyJ/7jjzdyYgmsbVnxrPv3bULKzU6c1Ci2neC/lpndychMcDRQMC6blw1X/DEOl6QPyP8jupwXF6ncGfggk8d1s7jtzlIKPbBGk4+Z/LOzWAYgZGcHALwKETxi8RZAERtUUIvpH3pPUqbGEH/3pPkHHTRqUo1nVadIrcfxZAcAaY496yMOo95dNQxrFZxUYM951iC9XLcJW4bNezmiTPW3KRZCIsTOZ5q49/4ekK0Dk1xn46Mjgdfcys+MjbuTl0XQe3NJfutV8iv1eVmhW5vK6jPUYpHf6khjF1wkFTHMo0YNVWfvXWGc8HWJ+UPLS3A7OjmsVBnbl6GfurPl+mLSeAk8eSEQ5DOuPXyyg+FRdmCSrsCCDtcVkTwxpe6wmjkPclcuzvdeQChvwmBsRZKq1gOyM9oZcOfytVAaqaolBxrH
16 16
   template:
17 17
     data: null
18 18
     metadata: