All Projects → geritol → secret-backup-operator

geritol / secret-backup-operator

Licence: MIT license
Kubernetes operator for backing up secrets

Programming Languages

javascript
184084 projects - #8 most used programming language
Dockerfile
14818 projects

Projects that are alternatives of or similar to secret-backup-operator

akrobateo
Akrobateo is a simple Kubernetes operator to expose in-cluster LoadBalancer services as node hostPorts using DaemonSets.
Stars: ✭ 111 (+753.85%)
Mutual labels:  kubernetes-operator
percona-postgresql-operator
Percona Operator for PostgreSQL
Stars: ✭ 132 (+915.38%)
Mutual labels:  kubernetes-operator
kubexray
JFrog KubeXray scanner on Kubernetes
Stars: ✭ 22 (+69.23%)
Mutual labels:  kubernetes-operator
kubegres
Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql instances and manage databases replication, failover and backup.
Stars: ✭ 1,107 (+8415.38%)
Mutual labels:  kubernetes-operator
cmak-operator
CMAK (prev. Kafka Manager) for Kubernetes
Stars: ✭ 45 (+246.15%)
Mutual labels:  kubernetes-operator
freya
Scala Kubernetes Operator library
Stars: ✭ 40 (+207.69%)
Mutual labels:  kubernetes-operator
pulp-operator
Kubernetes Operator for Pulp 3. Under active development.
Stars: ✭ 32 (+146.15%)
Mutual labels:  kubernetes-operator
astarte-kubernetes-operator
Astarte Kubernetes Operator
Stars: ✭ 18 (+38.46%)
Mutual labels:  kubernetes-operator
stackgres
StackGres Operator, Full Stack PostgreSQL on Kubernetes // !! Mirror repository of https://gitlab.com/ongresinc/stackgres, only accept Merge Requests there.
Stars: ✭ 479 (+3584.62%)
Mutual labels:  kubernetes-operator
kotary
Managing Kubernetes Quota with confidence
Stars: ✭ 85 (+553.85%)
Mutual labels:  kubernetes-operator
microcks-ansible-operator
Kubernetes Operator for easy setup and management of Microcks installs
Stars: ✭ 21 (+61.54%)
Mutual labels:  kubernetes-operator
netris-operator
The Kubernetes Operator for Netris
Stars: ✭ 28 (+115.38%)
Mutual labels:  kubernetes-operator
infinispan-operator
Infinispan Operator
Stars: ✭ 32 (+146.15%)
Mutual labels:  kubernetes-operator
nifi-stateless-operator
An Operator for scheduling and executing NiFi Flows as Jobs on Kubernetes
Stars: ✭ 52 (+300%)
Mutual labels:  kubernetes-operator
abstract-operator
Library/SDK for creating the operators for Kubernetes and Openshift.
Stars: ✭ 60 (+361.54%)
Mutual labels:  kubernetes-operator
ship-it
Wattpad's tool for continuously deploying code to Kubernetes quickly, safely, and observably.
Stars: ✭ 14 (+7.69%)
Mutual labels:  kubernetes-operator
sieve
Automatic Reliability Testing for Kubernetes Controllers
Stars: ✭ 183 (+1307.69%)
Mutual labels:  kubernetes-operator
kubeflare
A Kubernetes Operator to manage Cloudflare settings via a declarative Kubernetes API
Stars: ✭ 50 (+284.62%)
Mutual labels:  kubernetes-operator
kubectlsafe
Safe operations in kubectl with plugin kubectlsafe
Stars: ✭ 36 (+176.92%)
Mutual labels:  kubernetes-operator
vault-sidecar-injector
Kubernetes admission webhook for secure, seamless and dynamic handling of secrets in your applications
Stars: ✭ 55 (+323.08%)
Mutual labels:  kubernetes-secrets

Secret backup operator

An operator to backup secrets on a Kubernetes cluster.
Backup happens when secrets are modified.
Backup data is stored in an other secret <secret-name>-backup, that has a single key BACKUP containing the secrets versions in a JSON encoded list.

Setup

To be able to run this on a cluster you need to deploy a Deployment that runs an image built using the provided Dockerfile, the pods need to run with a ServiceAccount that is authorized to create, read, watch and edit secrets. Eg.:

apiVersion: v1
kind: ServiceAccount
metadata:
  name: secret-operator-service-account
  namespace: some-namepace
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: secret-reader
rules:
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "watch", create", "update", "patch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: read-secrets
  namespace: default
subjects:
  - kind: ServiceAccount
    name: secret-operator-service-account
    namespace: some-namepace
roleRef:
  kind: ClusterRole
  name: secret-reader
  apiGroup: rbac.authorization.k8s.io
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].