8fccf09753
Design document: https://docs.google.com/document/d/1EjiCuXoiy8DEEXe15KxVJ4iWrwogCyG113_0LdzcWzQ/edit?usp=drive_web&ouid=102644738301620637153 This is the third of multiple patchsets to support encryption and decryption in airshipctl Complete feature: https://review.opendev.org/#/c/742695/ Change-Id: Ibe1060a83d11233cccaa3d3989765968a4dbed76
21 lines
770 B
Plaintext
21 lines
770 B
Plaintext
Encrypt plain text yaml files representing Kubernetes objects consisting of sensitive configuration.
|
|
|
|
Usage:
|
|
encrypt [flags]
|
|
|
|
Examples:
|
|
|
|
# Encrypt all kubernetes objects in the manifests directory.
|
|
airshipctl secret encrypt
|
|
|
|
# Encrypt file from src and write to a different dst file
|
|
airshipctl secret encrypt \
|
|
--src /tmp/manifests/target/secrets/qualified-secret.yaml \
|
|
--dst /tmp/manifests/target/secrets/encrypted-qualified-secret.yaml
|
|
|
|
|
|
Flags:
|
|
--dst string Path to the file or directory that has encrypted secrets for decryption. Defaults to src if empty.
|
|
-h, --help help for encrypt
|
|
--src string Path to the file or directory that has secrets in plaintext that need to be encrypted. Defaults to the manifest location in airship config
|