diff --git a/manuscript/kubernetes/sealed-secrets.md b/manuscript/kubernetes/sealed-secrets.md index c9a0a31..02f157e 100644 --- a/manuscript/kubernetes/sealed-secrets.md +++ b/manuscript/kubernetes/sealed-secrets.md @@ -107,6 +107,7 @@ Now that the "global" elements of this deployment (*just the HelmRepository in t ### ConfigMap +{% raw %} Now we're into the sealed-secrets-specific YAMLs. First, we create a ConfigMap, containing the entire contents of the helm chart's [values.yaml](https://github.com/bitnami-labs/sealed-secrets/blob/main/helm/sealed-secrets/values.yaml). Paste the values into a `values.yaml` key as illustrated below, indented 4 tabs (*since they're "encapsulated" within the ConfigMap YAML*). I create this in my flux repo at `sealed-secrets/configmap-sealed-secrets-helm-chart-value-overrides.yaml`: ??? example "Example ConfigMap (click to expand)" @@ -466,6 +467,7 @@ Now you're ready to seal some secrets! ### Sealing a secret To generate sealed secrets, we need the public key that the controller has generated. On a host with a valid `KUBECONFIG` env var, pointing to a kubeconfig file with cluster-admin privileges, run the following to retrieve the public key for the sealed secrets (*this is the public key, it doesn't need to be specifically protected*) +{% endraw %} ```bash kubeseal --fetch-cert \ diff --git a/manuscript/recipes/kubernetes/harbor/index.md b/manuscript/recipes/kubernetes/harbor/index.md new file mode 100644 index 0000000..2466cc2 --- /dev/null +++ b/manuscript/recipes/kubernetes/harbor/index.md @@ -0,0 +1,3 @@ +# Harbor + +harbor \ No newline at end of file diff --git a/manuscript/recipes/kubernetes/harbor/istio.md b/manuscript/recipes/kubernetes/harbor/istio.md new file mode 100644 index 0000000..d3f9885 --- /dev/null +++ b/manuscript/recipes/kubernetes/harbor/istio.md @@ -0,0 +1 @@ +# Istio with Harbor \ No newline at end of file diff --git a/mkdocs.yml b/mkdocs.yml index 1025281..30fe9ad 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -207,8 +207,11 @@ nav: # - Dashboard: kubernetes/wip.md # - Kured: kubernetes/wip.md # - KeyCloak: kubernetes/wip.md - # - Recipes: - # - GitHub Actions Runners: kubernetes/wip.md + - Recipes: + - Harbor: + - recipes/kubernetes/harbor/index.md + Istio: recipes/kubernetes/harbor/istio.md + # - GitHub Actions Runners: kubernetes/wip.md # - Cilium: kubernetes/wip.md # - Concourse: kubernetes/wip.md # - Flagger: kubernetes/wip.md