Sealed Secret - CI/CD Glossary Definition
A sealed secret is a secret encrypted with a controller-held public key so the ciphertext can be committed to a public repository, with only the in-cluster controller able to decrypt it.
A sealed secret is a secret encrypted with a controller-held public key so the ciphertext can be committed to a public repository, with only the in-cluster controller able to decrypt it.
A sealed secret is a secret encrypted with a controller-held public key so the ciphertext can be committed to a public repository, with only the in-cluster controller able to decrypt it.
Why it exists
GitOps stores everything in Git, but plaintext secrets cannot live there. Bitnami Sealed Secrets encrypts a Secret into a SealedSecret resource that is safe to version and only decrypts inside the target cluster.