Kube Secrets Operator: Secrets Beheren in GitOps Omgevingen

kubernetes gitops
2025-11-06
By Thomas Kooi
Het Secrets Management Probleem in GitOps Werken met secrets in Kubernetes is altijd een uitdaging, maar in GitOps workflows wordt dit nog complexer. GitOps methodologieën zoals FluxCD vereisen dat alles version-controlled is en declaratief gedefinieerd wordt - maar hoe beheer je dan secrets zonder ze in plain text in Git te committen? Over het algemeen heb je een paar opties: SealedSecrets: Werkt, maar vereist handmatige encryptie per secret via kubeseal. Niet ideaal voor dynamische of gegenereerde secrets.

Latest Posts

The Hidden Risks of Docker images: Unmaintained Software Components

As an early adopter of Docker, I’ve witnessed its amazing growth from the early days. I started with using Docker Swarm, and in 2018, I even wrote several blog posts on using Docker Swarm and how to use logspout to collect logs from Docker Swarm containers. In those posts, I explained how to deploy a global container on every node in a Swarm mode cluster to forward logs to a remote Logstash endpoint.

Introducing the kube-pg-upgrade CLI

As software and DevOps engineers, spinning up new PostgreSQL deployments for various applications, clusters, and environments is a straightforward task. However, these deployments inevitably require updates over time. Not all PostgreSQL deployments are managed by an operator, and upgrading these instances can involve significant manual effort.

2021-07-31

Automating code review with reviewdog

Your time spend on code review should be optimized as much as possible. Automation is something that can help you with this, and detecting security bugs within go code can be done using tools such as gosec. This post looks into configuring reviewdog to assist in Gitlab Merge Request reviews using tools such as gosec.

Running Kubernetes on Gitlab CI

When you work on infrastructure, develop helm charts or simply want you run your tests in a more production like environment, running Kubernetes on your Gitlab CI may a good fit for you. Luckily, it’s only a little bit of configuration to set-up!

Using Packer for faster provisioning

As a frequent user of Terraform, I have a variety of modules tailored for different purposes, many of which rely on CentOS with a Docker install script. However, while demoing a setup to a co-worker, we encountered a significant delay — about seven minutes — for a Terraform apply to complete with an install script. Determined to improve this, I dedicated my Sunday to exploring Packer. Given my extensive use of Terraform, delving into Packer seemed like a natural next step.