# PLACEHOLDER — seal with htwg-1 cluster key before use: # kubectl -n nowchess create secret generic ncs-db-secrets \ # --from-literal=ACCOUNT_DB_URL=... --from-literal=ACCOUNT_DB_PASSWORD=... \ # (add all other DB keys) \ # --dry-run=client -o yaml | kubeseal --controller-namespace kube-system -o yaml > this-file.yaml apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: name: ncs-db-secrets namespace: nowchess spec: encryptedData: REPLACE_KEY: REPLACE_WITH_SEALED_VALUE template: metadata: name: ncs-db-secrets namespace: nowchess