Secret: git-secret

Don't forget to modify secrets itself with sealed secret

A Guide to Git-SecretDEV Community

https://git-secret.io/git-secret-revealgit-secret.io

• List of secrets in the repo

➜ cprc-gitops git:(master) git secret list

Decrypts all added files

git secret reveal -f 

find the existing one and modify it (It should be downloaded and added to gitignore)

• Add secret

git-secret add clusters/stage/aws-us-west-2-pdx24-eks01/crowdstrike-falcon-sensor/secret.yaml

• Encrypt secret

git-secret hide -m

• In case of errors like git-secret: abort: file not found:

git secret reveal -f OUTPUT >gpg: can't open '~/cprc-gitops/clusters/stage/aws-us-west-2-pdx24-eks01/crowdstrike-falcon-sensor/secret.yaml.secret': No such file or directory>gpg: decrypt_message failed: No such file or directory>git-secret: abort: problem decrypting file with gpg: exit code 2: ~/cprc-gitops/clusters/stage/aws-us-west-2-pdx24-eks01/crowdstrike-falcon-sensor/secret.yaml

git secret hide -m >git-secret: done. 1 of 100 files are hidden.git secret reveal -f >git-secret: done. 100 of 100 files are revealed. git add -A git commit -am "add secret" git push

Passphrase: qweASD...