Secrets
10 Practical Tips to Tame Kubernetes
4 min readKubernetes is a powerful tool for managing containerized workloads—but with great power comes great complexity. Whether you’re just starting with Kubernetes or looking to tighten …
GitHub Actions Secrets: OIDC, Environments, SHA Pins
10 min readMost GitHub Actions secret leaks are not clever. A long-lived AWS key sits in repository secrets for three years, a pull_request_target workflow checks out a fork and runs its npm …
Extract a Kubernetes Secret From an etcd Snapshot
7 min readSomeone deleted a Secret, or overwrote it, and the only copy left is in an etcd snapshot. Restoring the whole cluster to get one object back would roll every other resource back …
Helm: Create a Secret Only If It Does Not Exist (lookup)
5 min readKubernetes Secrets are an essential part of securing sensitive information such as passwords, API keys, and certificates. When using Helm to manage your Kubernetes deployments, …
Decrypt One Secret From an RKE2 etcd Snapshot
9 min readSomeone deleted a Secret, or rotated a credential and lost the old value, and the only copy left is in last night’s RKE2 etcd snapshot. Restoring the whole cluster to get one …