diff --git a/prepare-vms/lib/commands.sh b/prepare-vms/lib/commands.sh index b214dc7f..ba4aed74 100644 --- a/prepare-vms/lib/commands.sh +++ b/prepare-vms/lib/commands.sh @@ -598,16 +598,16 @@ EOF fi" ##VERSION## https://github.com/bitnami-labs/sealed-secrets/releases - KUBESEAL_VERSION=v0.16.0 - case $ARCH in - amd64) FILENAME=kubeseal-linux-amd64;; - arm64) FILENAME=kubeseal-arm64;; - *) FILENAME=nope;; - esac - [ "$FILENAME" = "nope" ] || pssh " + KUBESEAL_VERSION=0.17.4 + #case $ARCH in + #amd64) FILENAME=kubeseal-linux-amd64;; + #arm64) FILENAME=kubeseal-arm64;; + #*) FILENAME=nope;; + #esac + pssh " if [ ! -x /usr/local/bin/kubeseal ]; then - curl -fsSLo kubeseal https://github.com/bitnami-labs/sealed-secrets/releases/download/$KUBESEAL_VERSION/$FILENAME && - sudo install kubeseal /usr/local/bin + curl -fsSL https://github.com/bitnami-labs/sealed-secrets/releases/download/v$KUBESEAL_VERSION/kubeseal-$KUBESEAL_VERSION-linux-$ARCH.tar.gz | + sudo tar -zxvf- -C /usr/local/bin kubeseal kubeseal --version fi" } diff --git a/slides/k8s/sealed-secrets.md b/slides/k8s/sealed-secrets.md index 0866d264..b4b0c352 100644 --- a/slides/k8s/sealed-secrets.md +++ b/slides/k8s/sealed-secrets.md @@ -54,9 +54,7 @@ - The official installation is done through a single YAML file -- There is also a Helm chart if you prefer that - - (if you're using Kubernetes 1.22+, see next slide!) +- There is also a Helm chart if you prefer that (see next slide!) @@ -66,7 +64,7 @@ .small[ ```bash kubectl apply -f \ - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.16.0/controller.yaml + https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.17.4/controller.yaml ``` ] @@ -80,15 +78,9 @@ If you change that, you will also need to inform `kubeseal` later on. class: extra-details -## Sealed Secrets on Kubernetes 1.22 +## Installing with Helm -- As of version 0.16, Sealed Secrets manifests uses RBAC v1beta1 - -- RBAC v1beta1 isn't supported anymore in Kubernetes 1.22 - -- Sealed Secerets Helm chart provides manifests using RBAC v1 - -- Conclusion: to install Sealed Secrets on Kubernetes 1.22, use the Helm chart: +- The Sealed Secrets controller can be installed like this: ```bash helm install --repo https://bitnami-labs.github.io/sealed-secrets/ \