How to commit secrets to Git and in general how to use encrypted secrets?
Answer
One possible process would be as follows:
- You create a Kubernetes secret (but don't commit it)
- You encrypt it using some 3rd party project (.e.g kubeseal)
- You apply the seald/encrypted secret
- You commit the the sealed secret to Git
- You deploy an application that requires the secret and it can be automatically decrypted by using for example a Bitnami Sealed secrets controller