diff --git a/slides/exercises/sealed-secrets-brief.md b/slides/exercises/sealed-secrets-brief.md new file mode 100644 index 00000000..4a2fa7b8 --- /dev/null +++ b/slides/exercises/sealed-secrets-brief.md @@ -0,0 +1,13 @@ +## Exercise — sealed secrets + +- Install the sealed secrets operator + +- Create a secret, seal it, load it in the cluster + +- Check that sealed secrets are "locked" + + (can't be used with a different name, namespace, or cluster) + +- Bonus: migrate a sealing key to another cluster + +- Set RBAC permissions to grant selective access to secrets diff --git a/slides/k8s/exercise-sealed-secrets.md b/slides/exercises/sealed-secrets-details.md similarity index 100% rename from slides/k8s/exercise-sealed-secrets.md rename to slides/exercises/sealed-secrets-details.md diff --git a/slides/kube-adv.yml b/slides/kube-adv.yml index 8e923811..848d8b3d 100644 --- a/slides/kube-adv.yml +++ b/slides/kube-adv.yml @@ -58,7 +58,6 @@ content: - k8s/operators.md - k8s/sealed-secrets.md - k8s/crd.md - #- k8s/exercise-sealed-secrets.md - #6 - k8s/ingress-tls.md - k8s/cert-manager.md diff --git a/slides/kube-selfpaced.yml b/slides/kube-selfpaced.yml index 3e4d1079..8c66dc06 100644 --- a/slides/kube-selfpaced.yml +++ b/slides/kube-selfpaced.yml @@ -133,7 +133,6 @@ content: - k8s/operators-example.md - k8s/kubebuilder.md - k8s/sealed-secrets.md - #- k8s/exercise-sealed-secrets.md - k8s/kyverno.md - k8s/eck.md - k8s/finalizers.md