You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is new feature in SOPS master that allows using \$EDITOR to spcify editor used by sops but not released yet.
98
98
99
-
### Clean
100
-
101
-
The operation will delete all decrypted files in a directory, recursively:
102
-
103
-
```
104
-
$ helm secrets clean examples/sops/
105
-
removed examples/sops/secrets.yaml.dec
106
-
```
107
-
108
99
If you use git there is commit hook that prevents commiting decrypted files and you can add all \*.yaml.dec files in you repository `.gitignore` file.
109
100
110
101
### Summary
@@ -136,7 +127,7 @@ charts/
136
127
```
137
128
138
129
As you can see we can run different PGP or KMS keys per project, globally or per any tree level. Thanks to this we can isolate tree on different CI/CD instances using same GIT repository.
139
-
As we use simple -f option when running the helm wrapper we can just use encrypted secrets.yaml and all these secrets will be decrypted and cleaned on the fly before and after helm run.
130
+
As we use simple -f option when running the helm wrapper we can just use encrypted secrets.yaml and all these secrets will be decrypted on the fly before and after helm run.
You can see that we use a global secrets file and a specific secrets file for this app in this project/environment/region. We use some plain value files next to secrets. We use values from secrets in some secrets template in helloworld application chart template and some values are used in the configmap template in the same chart. Some values are added as env variables in deployment manifest templates in the chart. As you can see we can use secrets and values in helm in many ways. Everything depends on use case.
219
210
220
-
Even when helm failed then decrypted files are cleaned
211
+
Even when helm fails, decrypted files are removed automatically
0 commit comments