Skip to content

Commit

Permalink
docs: enhance FAQ with multi doc support block
Browse files Browse the repository at this point in the history
Signed-off-by: Tim Heurich <[email protected]>
  • Loading branch information
theurichde committed Sep 11, 2023
1 parent 5fdb589 commit f7eaabe
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -716,6 +716,10 @@ Developing guidelines can be found [in the Developer Guide](docs/developer/READM

## FAQ

### Can I encrypt multiple secrets at once, in one YAML / JSON file?

Yes, you can! Drop as many secrets as you like in one file. Make sure to separate them via `---` for YAML and as extra, single objects in JSON.

### Will you still be able to decrypt if you no longer have access to your cluster?

No, the private keys are only stored in the Secret managed by the controller (unless you have some other backup of your k8s objects). There are no backdoors - without that private key used to encrypt a given SealedSecrets, you can't decrypt it. If you can't get to the Secrets with the encryption keys, and you also can't get to the decrypted versions of your Secrets live in the cluster, then you will need to regenerate new passwords for everything, seal them again with a new sealing key, etc.
Expand Down

0 comments on commit f7eaabe

Please sign in to comment.