From 3b9a2113a59c56d27d340dc2ca00b633b6c78c5c Mon Sep 17 00:00:00 2001 From: Jerome Petazzoni Date: Fri, 29 Oct 2021 04:07:26 +0200 Subject: [PATCH] =?UTF-8?q?=E2=99=BB=EF=B8=8F=20=20Update=20sealed=20secre?= =?UTF-8?q?ts=20exercise?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- slides/exercises/sealed-secrets-brief.md | 13 +++++++++++++ .../sealed-secrets-details.md} | 0 slides/kube-adv.yml | 1 - slides/kube-selfpaced.yml | 1 - 4 files changed, 13 insertions(+), 2 deletions(-) create mode 100644 slides/exercises/sealed-secrets-brief.md rename slides/{k8s/exercise-sealed-secrets.md => exercises/sealed-secrets-details.md} (100%) diff --git a/slides/exercises/sealed-secrets-brief.md b/slides/exercises/sealed-secrets-brief.md new file mode 100644 index 00000000..4a2fa7b8 --- /dev/null +++ b/slides/exercises/sealed-secrets-brief.md @@ -0,0 +1,13 @@ +## Exercise — sealed secrets + +- Install the sealed secrets operator + +- Create a secret, seal it, load it in the cluster + +- Check that sealed secrets are "locked" + + (can't be used with a different name, namespace, or cluster) + +- Bonus: migrate a sealing key to another cluster + +- Set RBAC permissions to grant selective access to secrets diff --git a/slides/k8s/exercise-sealed-secrets.md b/slides/exercises/sealed-secrets-details.md similarity index 100% rename from slides/k8s/exercise-sealed-secrets.md rename to slides/exercises/sealed-secrets-details.md diff --git a/slides/kube-adv.yml b/slides/kube-adv.yml index 8e923811..848d8b3d 100644 --- a/slides/kube-adv.yml +++ b/slides/kube-adv.yml @@ -58,7 +58,6 @@ content: - k8s/operators.md - k8s/sealed-secrets.md - k8s/crd.md - #- k8s/exercise-sealed-secrets.md - #6 - k8s/ingress-tls.md - k8s/cert-manager.md diff --git a/slides/kube-selfpaced.yml b/slides/kube-selfpaced.yml index 3e4d1079..8c66dc06 100644 --- a/slides/kube-selfpaced.yml +++ b/slides/kube-selfpaced.yml @@ -133,7 +133,6 @@ content: - k8s/operators-example.md - k8s/kubebuilder.md - k8s/sealed-secrets.md - #- k8s/exercise-sealed-secrets.md - k8s/kyverno.md - k8s/eck.md - k8s/finalizers.md