From 3bf427e985e810f12b8c7152f61b7b74756fb968 Mon Sep 17 00:00:00 2001 From: faizanahmad055 Date: Mon, 18 Mar 2019 16:13:55 +0100 Subject: [PATCH 1/2] Add doc for how to use sealed secrets with reloader Signed-off-by: faizanahmad055 --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 9441910b..93ceec1f 100644 --- a/README.md +++ b/README.md @@ -95,6 +95,7 @@ spec: ``` ### NOTES +- Reloader also supports [sealed-secrets](https://github.com/bitnami-labs/sealed-secrets). [Here](docs/Reloader-with-Sealed-Secrets.md) are the steps to use sealed-secrets with reloader. - `reloader.stakater.com/auto: "true"` will always override when use with either `secret.reloader.stakater.com/reload` or `configmap.reloader.stakater.com/reload` annotation. - you may override the auto annotation with the `--auto-annotation` flag - you may override the configmap annotation with the `--configmap-annotation` flag From 379b6c01314cd2b17ddcd3382b3bde35983aa79b Mon Sep 17 00:00:00 2001 From: faizanahmad055 Date: Mon, 18 Mar 2019 16:14:47 +0100 Subject: [PATCH 2/2] Add doc for how to use sealed secrets with reloader Signed-off-by: faizanahmad055 --- docs/Reloader-with-Sealed-Secrets.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 docs/Reloader-with-Sealed-Secrets.md diff --git a/docs/Reloader-with-Sealed-Secrets.md b/docs/Reloader-with-Sealed-Secrets.md new file mode 100644 index 00000000..4b7d9225 --- /dev/null +++ b/docs/Reloader-with-Sealed-Secrets.md @@ -0,0 +1,11 @@ +Below are the steps to use reloader with Sealed Secrets. +1. Download and install the kubeseal client from [here](https://github.com/bitnami-labs/sealed-secrets). +2. Install the controller for sealed secrets +3. Fetch the encryption certificate +4. Encrypt the secret. +5. Apply the secret. +7. Install the tool which uses that sealed secret. +8. Install Reloader. +9. Once everything is setup, update the original secret at client and encrypt it with kubeseal to see reloader working. +10. Apply the updated sealed secret. +11. Reloader will resatart the pod to use that updated secret. \ No newline at end of file