From 4fc8fa43b53f5e9a13db0b469ea0a80d2ac61d1a Mon Sep 17 00:00:00 2001 From: aq92 Date: Sun, 11 Feb 2024 09:36:58 -0500 Subject: [PATCH] I got the sealed secrets running as expected. Also created a new keystore with same password as what is in Sealed Secrets --- .gitignore | 1 - README.md | 8 ++++---- create_keystore.sh | 0 keystore | Bin 0 -> 2728 bytes ppdt-sealedsecret.yaml | 22 ++++++++++++++++++++++ 5 files changed, 26 insertions(+), 5 deletions(-) mode change 100644 => 100755 create_keystore.sh create mode 100644 keystore create mode 100644 ppdt-sealedsecret.yaml diff --git a/.gitignore b/.gitignore index 9cbf76d..48dcb35 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,5 @@ # Making certificates, dont mess around here .env -keystore ppdt-certificate # No Binaries diff --git a/README.md b/README.md index 7c52519..18746d3 100644 --- a/README.md +++ b/README.md @@ -53,7 +53,7 @@ rm kubeseal curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 chmod 700 get_helm.sh ./get_helm.sh -rm ./get_helm +rm get_helm # Add Sealed Secret Cluster helm repo add sealed-secrets https://bitnami-labs.github.io/sealed-secrets @@ -130,12 +130,12 @@ aws eks update-kubeconfig --name ppdt --region us-east-2 It is suggested you use the existing sealed secret. The password in this secret is aligned with what is on the keystore, ```commandline -kubectl -f apply ppdt-sealedsecret.yaml +kubectl apply -f ppdt-sealedsecret.yaml ``` Alternatively, you can create a new sealed secret as follows: ```bash -kubectl create secret generic ppdt-secrets --from-literal=keystore-pass=ZifangHuang +kubectl create secret generic ppdt-secrets --from-literal=keystore-pass= kubectl get secret ppdt-secrets -o yaml | kubeseal > ppdt-sealedsecret.yaml ``` However, if you make a new sealed secret, you should re-make the keystore as well. @@ -221,4 +221,4 @@ Code Authors: Andrew Quijano, Spyros T. Halkidis, Kevin Gallagher [MIT](https://choosealicense.com/licenses/mit/) ## Project status -Fully tested and completed. Although I believe I need a label encoder to compare two strings. \ No newline at end of file +Fully tested and completed. Although I believe I need a label encoder to compare two strings. diff --git a/create_keystore.sh b/create_keystore.sh old mode 100644 new mode 100755 diff --git a/keystore b/keystore new file mode 100644 index 0000000000000000000000000000000000000000..85330202a9ddfce6db620e9e4a0938ad6ab4ca3a GIT binary patch literal 2728 zcma);c{J1y_s3_(EMXXoeJLWc_Ob7pkhQNUB4jK3J|?n+nPe-Hok5hzE+%9zgvszV zmPlkT`xYf-^7x(KbNZg=uje`U+;h);z3;t$zRv{+OvMl|13+LhgELCS8pZCjfDzzA z0@HaYfl2cis{#aA^?yjPCr|>6c#N}-GY!uC?=2(~7*a@pVUD2|;Pz(&#sXXi)c$Fa zfHaiz$sBsbweDg}IMG&+`)f?@=eDXX2tE1Ym;g{DPP)EU zxo)IUw)AK-J>F`5cpu-_tE(m!nE%|k61>+X@tEcB1}TJg1B-u{cmg2+Kr^PG7a=FAKO@39<07~0LRpOuNLE(&n$$~n$1k3P8$0DtZssme=4CIApiK(>3Cfe#k>sHei+n4fRkz!RdhR(A}-0impCQ z?vi|l9=#!no#1ckyuo0}fN`#$N!W7R1ZSHsnaoj^y{{~IpL*mN4@Iwk6m1lbzPr$d zHus@j;hvqe&n;CXTrPS~)%T*@&${)fV^*%GX8z+9rZ^Q(CO5)2aeMw)WEjL_ZjEYq zBB0Ml<#habY>o*l`eE5Yu!yGZ-Cd@P#H7?QoomT6iu)r$DLiVXX(MeHQO?Gyn`~$L z4M#n=B4Vo+;#Tf_UL+k2rp&Pwu5(N}?6=dK;&Rw)ID&;PMOB(Pt*WEZ>tb&u7X$)B zm!PG|mD_pmNqpMbWRv?#&#qT-yUa;(m^X2*?Kd5rW{!pWYsaQ8|5g=slDM1US$0pe z9;x_x(&7$x$qzfzT;ZXr?(BMzI^g@q=!o-;(Oj!Y-GU6+n-=|AZeK4Cc;O0dPqDV) zNb%(7UPU$MwDIVTOPS)58Q6A#Cz&KJaDVAF{g9qC9z@nYy=Wa>gA5OS_f7y z?PrPj-|H+BG&?u@a?Gd8X+C7;p7ILeIo9hjXLkm!fqe`CB|AsfPrA2N5BF~vEjQm-1~etgQ(+b% zLTAk0c3DMp2ISfE&-I(XZ|xmjcg+1zI7oRLZrdB%!|Z3~t6|)i83mku@|L}0D(RO< z8|Aj`Hl<&`ub>Y7<0gAz@B`sp4pGd$LHqnJ;rzFwL@(aA2!wuM&K} zE_=`wRQTeN+tOd

Z_5S#GK9N_vew!=tG|WUG?96|Pa2++8}#v!pAf1cob^ypmO@ zpPXU2W8+UdB(=hpMXEyP(XU#~tc9iYW68t%0_Gao!rJl}K;VyEGIGkZo^1R1abx41VsK3x#T&a9G0HGuEO%FfU1g$yfPrK ztfT@Ep!h#S2zVg@iakbt5HRStxc{So|C>$QP0nUJoWCvSHM_g?5J|WI%9&CAUu+ux z8-yTzXOmhvN4a(2efmi>fnj@l4l#+gV8N`^Jl%aw3U6k+1WVcLpPJ&9vBLgMp&7<3 znx|*%p}VhS3tAS%<-D^i2;=TmML&fIt@J%9bnZI~t!mp7Rp|COm>qM>pr9oSc-Cr5 zn2SrCXu?r0i)FIDqH2>tw)5*EX6B{IBQ&<75WMoWMg;3DvE-!#X!aTdW9KOyBJ&zE z%g*YojhGZBZ$nh+VfUdDtkW%kuPo%MNI5kFY8{;WsI+}9ZSF??4)M1cSJR304|r?E zY3~!yjniDZyk{Tqf;aAuiANp2*X*{|SX}eSz1^NDyk`6bGGly-R;2D;mryw{5*=@g z>xk|>ywNzCb90WKDFcISuNI3feekRg#U|;H(Ka{NuEovxTfU2aV=%QY-LW*D8lR=5 z@H)L+FRb&RqegUxIDF7mebTU>6px=#_OH-3qVv{$t}{Jn$)S>GyRgJS5ez|mD6FbC z{Y;m86NZ`&zeM(&sZ&8YWe+H+dB1tp`*1fa<)k1n-I-ZG`n*z+59ng)VNP(RYXY{HM5_JPouh?iQCf$ zwIAM7!PX`%eS1J06hn0}`db%{@3ft4dVV4Ax`OseOySPeLFdx)^ujHJ=+v>>?(dU5 zViL}pmoE5&;yKanXv*WO`el?*)$L{X9W2AN{Ha-7+(wd=N#>g3 z%J;7$%Ne9&_hW}_gMj%fv%l-6j7}EFpyq`d^(pZBO#!_~pYWhsJKu5NZ(bT()o%yP z)=A217y60?mL>m2VtUVoai39xKie8}ykFgQO{cOPUKabBFwhKXV$pg~kqSF&6{50c zLG^G)hVHo_V2pT`xmJ8RORh~J;*{{s4nsk~CqF_b?<(F@>UMZ&VVL~~)%GmZm|`S}{qr*>x8 z37aa$U%~TH5+6cj_8&O&TWnuE4M!nY>(p!uF&sWzldB0l?2bnJDWY@w4bvWYG=D>J zq{vvUXOxIS(8Ucy@qYAJ7uxw3=aN{cv}uHAg%yf+(7?;p2K)uc11x{OHwYL8f(loU z-aa5Yg>h?zCMoRX<*f{*WY-5LVPQV-=gtvrIE7-5ZCBT(e+duEA I|DWaj3zXXSjQ{`u literal 0 HcmV?d00001 diff --git a/ppdt-sealedsecret.yaml b/ppdt-sealedsecret.yaml new file mode 100644 index 0000000..622bc57 --- /dev/null +++ b/ppdt-sealedsecret.yaml @@ -0,0 +1,22 @@ +{ + "kind": "SealedSecret", + "apiVersion": "bitnami.com/v1alpha1", + "metadata": { + "name": "ppdt-secrets", + "namespace": "default", + "creationTimestamp": null + }, + "spec": { + "template": { + "metadata": { + "name": "ppdt-secrets", + "namespace": "default", + "creationTimestamp": null + }, + "type": "Opaque" + }, + "encryptedData": { + "keystore-pass": "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" + } + } +}