It is open source tool which help to secure secrets, and with help of this we can put our secrets in public repo in encrypted form.

1. Dhiraj Sonawane (DevOps Studio)
A secure way to manage secretes in Kubernetes
Presented By:

2. Lack of etiquette and manners is a huge turn off.
KnolX Etiquettes
 Punctuality
Join the session 5 minutes prior to the session start time. We start on time
and conclude on time!
 Feedback
Make sure to submit a constructive feedback for all sessions as it is very
helpful for the presenter.
 Silent Mode
Keep your mobile devices in silent mode, feel free to move out of session
in case you need to attend an urgent call.
 Avoid Disturbance
Avoid unwanted chit chat during the session.

3. 1. What are Kubernetes Secretes
2. Why to use Sealed Secretes?
3. Components of Sealed Secretes
4. How it works?
5. Advantages and competitors

4. NODE
What are Kubernetes secrets?
 Secret is an object that contains a small amount of sensitive
data such as a password, a token, or a key.
 These Secrets can be mounted as data volumes or exposed
as environment variables to the containers in a Pod.

5. Why to use sealed secrets?
 Sealed Secrets provides a mechanism to encrypt a Secret
object so that it is safe to store - even to a public repository.
 A SealedSecret can be decrypted only by the controller
running in the Kubernetes cluster.

6. NODE
Components of sealed secrets
 Sealed Secrets is composed of two parts,
 Cluster-side controller
It is responsible for managing the sealed secret deployment.
The primary task for the controller is to manage the private
and public keys for encryption and decryption purposes.
 Client-side utility called kubeseal
It is a CLI tool that creates a CRD for sealed secrets from a
secret. It communicates with the controller and retrieve the
public key needed for encrypting the secrets

7. NODE
How it works?

8. NODE
Simplicity
GitOps Friendly
Strong Encryption(AES-256)
Easy to integrate
Open-source
Advantages of sealed secrets

9. NODE
SOPS - Secrets OPerationS
Vault - Hashicorp
KMS plugins - Cloudspecific
Git-crypt
Competitors of seal secrets