ClusterSecret

https://github.com/zakkg3/clustersecret
Admin
ClusterSecret is a Kubernetes operator that automates the management and synchronization of secrets...
Tokens:1,464
Snippets:27
Trust Score:7.2
License:Apache-2.0
Update:3 months ago
Show doc for...
Tokens:
Raw
### Install ClusterSecret using Helm

Source: https://github.com/zakkg3/clustersecret/blob/master/charts/cluster-secret/README.md

Install the ClusterSecret Helm chart by adding the repository and then performing the installation. This command installs the chart into the 'clustersecret' namespace and creates the namespace if it doesn't exist.

```bash
helm repo add clustersecret https://charts.clustersecret.com/
helm install clustersecret clustersecret/cluster-secret --version 0.4.3 -n clustersecret --create-namespace
```

--------------------------------

### Minimal ClusterSecret Object Example

Source: https://github.com/zakkg3/clustersecret/blob/master/README.md

A basic YAML definition for a ClusterSecret object. This example demonstrates the essential fields required to create a secret that will be distributed across namespaces.

```yaml
apiVersion: clustersecret.io/v1
kind: ClusterSecret
metadata:
  name: global-secret
  namespace: my-fav-namespce
data:
  username: MTIzNDU2Cg==
  password: Nzg5MTAxMTIxMgo=
```

--------------------------------

### Install ClusterSecret using kubectl

Source: https://github.com/zakkg3/clustersecret/blob/master/README.md

Deploys ClusterSecret to your Kubernetes cluster by cloning the repository and applying the YAML files. This method requires `git` and `kubectl`.

```bash
cd ClusterSecret
kubectl apply -f ./yaml
```

--------------------------------

### Get ClusterSecrets

Source: https://github.com/zakkg3/clustersecret/blob/master/README.md

Retrieves a list of all ClusterSecret resources deployed in the 'clustersecret' namespace. This command helps verify the creation of secrets.

```bash
$(kubectl get csec -n clustersecret)
NAME            TYPE
global-secret
```

--------------------------------

### Manual Secret Replication Command

Source: https://github.com/zakkg3/clustersecret/blob/master/charts/cluster-secret/README.md

This bash command demonstrates how to manually replicate a secret from one namespace to another using kubectl and sed. ClusterSecret automates this process.

```bash
kubectl get secret <secret-name> -n <source-namespace> -o yaml \
| sed s/"namespace: <source-namespace>"/"namespace: <destination-namespace>"/\
| kubectl apply -n <destination-namespace> -f -
```

--------------------------------

### Apply ClusterSecret Object YAML

Source: https://github.com/zakkg3/clustersecret/blob/master/README.md

Creates a ClusterSecret object by applying its YAML definition to your cluster. The operator will then create the corresponding secret in matching namespaces.

```bash
kubectl apply -f yaml/Object_example/obj.yaml
```

--------------------------------

### Define a ClusterSecret Resource

Source: https://github.com/zakkg3/clustersecret/blob/master/charts/cluster-secret/README.md

This YAML defines a ClusterSecret resource. It specifies which namespaces to include and exclude, and the data for the secret. Use this to create a secret that will be distributed across your cluster.

```yaml
kind: ClusterSecret
apiVersion: clustersecret.io/v1
metadata:
  name: default-wildcard-certifiate
matchNamespace:
  - prefix-ns-*
  - anothernamespace
avoidNamespaces:
  - supersecret-ns
data:
  tls.crt: BASE64
  tls.key: BASE64
```
Tokens:
Raw