can someone help me? I have a repository having some YAML files like deployment_app.yaml, and a secret object. the pod inside the deployment_file must read the secret object during the deployment process and I wanna save the secret object into a git secret but I also still want to let the deployment file be able to read the secret object once the deployment, how can I do it?

1

There are 1 best solutions below

6
On

Here's how it can be done, from the documentation of git secret. Read the docs here.

Basically you will have to create a new key-pair in your CI that will be used to decrypt the Git secret during deployment.