Document Cluster wide secret usage about sealed-secrets HOT 4 CLOSED

@anguslees any love?

from sealed-secrets.

@deyceg . For using a secret cluster wide you will need to add the following annotations to the secret before running the kubseal tool.

    "metadata": {
        "name": "docker-registry-secret",
        "creationTimestamp": null,
        "annotations": {
             "sealedsecrets.bitnami.com/cluster-wide": "true"
        }
    },

The annotation sealedsecrets.bitnami.com/cluster-wide does not make the secret attached to a particular namespace anymore.

from sealed-secrets.

thanks @linuxbsdfreak . I'd like to improve the documentation on this.

The annotation goes on both the secret you pass as input to kubeseal and it will be included in the generated sealed secret (so that we know how to decrypt it, as non cluster-wide secrets literally include the namespace and secret name in the encryption key)

from sealed-secrets.

Duplicate of #241

from sealed-secrets.