BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Living Open Source Foundation - ECPv6.15.13//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://livingopensource.org
X-WR-CALDESC:Events for Living Open Source Foundation
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:Africa/Lusaka
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
TZNAME:CAT
DTSTART:20250101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Africa/Lusaka:20260828T180000
DTEND;TZID=Africa/Lusaka:20260828T190000
DTSTAMP:20260807T014558
CREATED:20260805T090141Z
LAST-MODIFIED:20260805T090141Z
UID:5961-1787940000-1787943600@livingopensource.org
SUMMARY:Sealed Secrets: Encrypted Secrets You Can Safely Commit
DESCRIPTION:You’ve embraced GitOps and made Git the source of truth for your Kubernetes deployments. Now it’s time to solve one of the biggest challenges in Kubernetes: safely managing Secrets in Git. \nIS THIS FOR YOU?\n\nYou run applications on Kubernetes and are comfortable using kubectl\nYou know what Kubernetes Secrets and namespaces are\nYou’ve ever hesitated before committing a Secret to Git—or worse\, already have\nYou want to keep your entire cluster configuration in Git without exposing sensitive credentials\nYou want to understand Sealed Secrets without needing any cryptography background\n\nAFTER 60 MINUTES\, YOU’LL:\n\nUnderstand why a Kubernetes Secret stored in Git is simply Base64-encoded data rather than encrypted\, and why deleting it later does not remove the security risk\nInstall Bitnami Sealed Secrets and confidently use the kubeseal workflow to transform plaintext Secrets into encrypted SealedSecret resources that are safe to store in public or private Git repositories\nBuild a clear mental model of how Sealed Secrets works\, including public and private key cryptography\, where the private key lives\, and why only your cluster can decrypt sealed secrets\nLearn the practical differences between strict\, namespace-wide\, and cluster-wide sealing scopes\, and know when to use each\nUnderstand how Sealed Secrets handles key renewal\, why old keys are retained\, and how to back up and restore your sealing keys so a lost cluster doesn’t become a lost estate\nKnow exactly where Sealed Secrets fits in the Kubernetes ecosystem\, and when solutions such as External Secrets or OpenBao are a better choice\n\nKeeping Secrets out of Git often creates a different problem: credentials end up scattered across CI variables\, chat messages\, local files\, or manual deployment steps. Your GitOps repository stops being the complete source of truth\, and recovering a cluster becomes far more difficult. \nIn this session\, we’ll fix that. You’ll install the Sealed Secrets controller\, create and seal your first Secret\, commit it safely to Git\, and see why the encrypted output is useless to anyone except your Kubernetes cluster. We’ll also deliberately break a Sealed Secret by moving it to the wrong namespace\, making the different sealing scopes intuitive rather than theoretical. \nFinally\, we’ll cover the production topics that are often overlooked: key rotation\, key backup and recovery\, and the operational limitations of Sealed Secrets. By the end of this free session\, you’ll know how to manage Kubernetes Secrets safely in Git while understanding when Sealed Secrets is the right tool—and when it’s time to adopt a dedicated secrets management solution. \nBring a Kubernetes cluster. Kind\, k3s\, Minikube\, or any other Kubernetes distribution is perfect. The only other prerequisite is a basic understanding of Kubernetes resources and a desire to make your GitOps workflow both secure and complete. \nYOUR INSTRUCTOR:\nPascal van Dam is a seasoned Linux and Kubernetes architect with expertise in cloud technologies. As a certified Linux Foundation trainer and IT Gilde Guru\, he excels at making complex concepts accessible through his straightforward teaching approach. Drawing from extensive government and enterprise experience\, Pascal bridges technical solutions with business value\, helping professionals master essential skills quickly. \nHOW TO JOIN THIS SESSION?\nThis live session is completely free! – A limited-time opportunity before they become exclusive to Living Open Source members. \nClick here to enter the Zoom Session\nPasscode:657744
URL:https://livingopensource.org/events/sealed-secrets-encrypted-secrets-you-can-safely-commit/
LOCATION:Online
ATTACH;FMTTYPE=image/png:https://livingopensource.org/wp-content/uploads/2026/08/1-Rust-Part-251.png
ORGANIZER;CN="Living Open Source Foundation":MAILTO:info@livingopensource.org
END:VEVENT
END:VCALENDAR