GitOps with GitLab: How to tackle secrets management
Dec 2, 2021Viktor Nagy

Summary
This post details the setup and usage of Bitnami's Sealed Secrets for managing Kubernetes secrets within a GitOps workflow. It covers installing the Sealed Secrets controller, retrieving the public key for encryption, and using the `kubeseal` CLI tool to encrypt native Kubernetes Secrets into `SealedSecret` custom resources. It also provides a utility script for simplifying the sealing process and discusses the benefits of Git-based secrets management, such as versioning and collaboration via merge requests.
More from the GitLab Secrets Manager trail
- GitLab Secrets Manager adds ESO, Terraform, API support
- Manage CI/CD credentials with GitLab Secrets Manager
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Solving complex challenges with GitLab Duo Workflow
- How to scan a full commit history to detect sensitive secrets