doc
This commit is contained in:
@@ -654,21 +654,11 @@ kubectl create secret generic myapp-credentials \
|
|||||||
|
|
||||||
#### Step 2: Seal the Secret
|
#### Step 2: Seal the Secret
|
||||||
|
|
||||||
Get the public certificate (one-time setup):
|
|
||||||
|
|
||||||
```bash
|
|
||||||
# Fetch public cert from cluster
|
|
||||||
kubeseal --fetch-cert \
|
|
||||||
--controller-name=sealed-secrets-controller \
|
|
||||||
--controller-namespace=kube-system \
|
|
||||||
> pub-cert.pem
|
|
||||||
```
|
|
||||||
|
|
||||||
Seal your secret:
|
Seal your secret:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
kubeseal --format=yaml \
|
kubeseal --format=yaml \
|
||||||
--cert=pub-cert.pem \
|
--namespace=myapp \
|
||||||
< private/myapp-credentials.yaml \
|
< private/myapp-credentials.yaml \
|
||||||
> secrets/myapp-credentials-sealed.yaml
|
> secrets/myapp-credentials-sealed.yaml
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user