github/container.training
1
0
Fork 0
mirror of https://github.com/jpetazzo/container.training.git synced 2026-02-14 09:39:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

♻️ Update sealed-secrets version and install instructions

Browse Source
This commit is contained in:
Jérôme Petazzoni
2022-04-12 20:46:01 +02:00
parent 39eebe320f
commit 7076152bb9
2 changed files with 13 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
prepare-vms/lib/commands.sh
View File

@@ -598,16 +598,16 @@ EOF
fi"
##VERSION## https://github.com/bitnami-labs/sealed-secrets/releases
KUBESEAL_VERSION=v0.16.0
case $ARCH in
amd64) FILENAME=kubeseal-linux-amd64;;
arm64) FILENAME=kubeseal-arm64;;
*) FILENAME=nope;;
esac
[ "$FILENAME" = "nope" ] || pssh "
KUBESEAL_VERSION=0.17.4
#case $ARCH in
#amd64) FILENAME=kubeseal-linux-amd64;;
#arm64) FILENAME=kubeseal-arm64;;
#*) FILENAME=nope;;
#esac
pssh "
if [ ! -x /usr/local/bin/kubeseal ]; then
curl -fsSLo kubeseal https://github.com/bitnami-labs/sealed-secrets/releases/download/$KUBESEAL_VERSION/$FILENAME &&
sudo install kubeseal /usr/local/bin
curl -fsSL https://github.com/bitnami-labs/sealed-secrets/releases/download/v$KUBESEAL_VERSION/kubeseal-$KUBESEAL_VERSION-linux-$ARCH.tar.gz |
sudo tar -zxvf- -C /usr/local/bin kubeseal
kubeseal --version
fi"
}

16
slides/k8s/sealed-secrets.md
View File

@@ -54,9 +54,7 @@
- The official installation is done through a single YAML file
- There is also a Helm chart if you prefer that
(if you're using Kubernetes 1.22+, see next slide!)
- There is also a Helm chart if you prefer that (see next slide!)
<!-- #VERSION# -->
@@ -66,7 +64,7 @@
.small[
```bash
kubectl apply -f \
https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.16.0/controller.yaml
https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.17.4/controller.yaml
```
]
@@ -80,15 +78,9 @@ If you change that, you will also need to inform `kubeseal` later on.
class: extra-details
## Sealed Secrets on Kubernetes 1.22
## Installing with Helm
- As of version 0.16, Sealed Secrets manifests uses RBAC v1beta1
- RBAC v1beta1 isn't supported anymore in Kubernetes 1.22
- Sealed Secerets Helm chart provides manifests using RBAC v1
- Conclusion: to install Sealed Secrets on Kubernetes 1.22, use the Helm chart:
- The Sealed Secrets controller can be installed like this:
```bash
helm install --repo https://bitnami-labs.github.io/sealed-secrets/ \