From 4b500cd37e1b5ee7c97cf4bd981997ebdaadf731 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Petazzoni?= Date: Thu, 4 Nov 2021 08:33:58 +0100 Subject: [PATCH] =?UTF-8?q?=E2=8F=AB=20Upgrade=20Sealed=20Secrets=20to=200?= =?UTF-8?q?.16=20and=20add=20k8s=201.22=20instructions?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- slides/k8s/sealed-secrets.md | 27 ++++++++++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/slides/k8s/sealed-secrets.md b/slides/k8s/sealed-secrets.md index 34ae7f18..ca456131 100644 --- a/slides/k8s/sealed-secrets.md +++ b/slides/k8s/sealed-secrets.md @@ -56,13 +56,17 @@ - There is also a Helm chart if you prefer that + (if you're using Kubernetes 1.22+, see next slide!) + + + .exercise[ - Install the operator: .small[ ```bash kubectl apply -f \ - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.13.1/controller.yaml + https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.16.0/controller.yaml ``` ] @@ -74,6 +78,27 @@ If you change that, you will also need to inform `kubeseal` later on. --- +class: extra-details + +## Sealed Secrets on Kubernetes 1.22 + +- As of version 0.16, Sealed Secrets manifests uses RBAC v1beta1 + +- RBAC v1beta1 isn't supported anymore in Kubernetes 1.22 + +- Sealed Secerets Helm chart provides manifests using RBAC v1 + +- Conclusion: to install Sealed Secrets on Kubernetes 1.22, use the Helm chart: + + ```bash + helm install --repo https://bitnami-labs.github.io/sealed-secrets/ \ + sealed-secrets sealed-secrets --namespace kube-system + ``` + +- Make sure to install in `kube-system` (or configure `kubeseal` accordingly!) + +--- + ## Creating a Secret - Let's create a normal (unencrypted) secret