#go#devops_workflow#encrypt_secrets#gitops#kubernetes#kubernetes_secrets
Sealed Secrets is a tool for Kubernetes that lets you safely store sensitive information—like passwords or API keys—in your code repository by encrypting them so only your Kubernetes cluster can decrypt them. You use a tool called `kubeseal` to encrypt secrets on your computer, and then store the encrypted result in your repository. When you apply this encrypted secret to your cluster, a special controller inside Kubernetes decrypts it and creates a regular secret that your apps can use. This means you can manage all your configuration in Git, even secrets, without worrying about exposing sensitive data, and only the cluster itself can access the real secret[2][5][1]. The benefit is that your secrets are protected at every step, and you can use Git workflows for everything, making your setup more secure and easier to manage.
https://github.com/bitnami-labs/sealed-secrets
Live: Get your virtual panda cuddles from Chongqing Zoo!
It's Saturday! Time for some super cute pandas. Yu Ai, Yu Ke, Mang Cancan, Qi Sanmei and Liang Yue in Chongqing Zoo get ready for clumsy rolls, silly play and fluffy cuteness. Join us to have a look! #panda
via CGTN
🩸🅰️🩸🩸🅰️
A Chinese zoo is under fire again for passing off dogs as pandas. This is the third time that people have been tricked by painting ordinary chow chows as pandas.
Visitors began to suspect that they weren't pandas when the spotted furry creatures started barking and panting like dogs.
The plan was perfect. What could go wrong?
#Panda#China
MARKHEMIST