Tag See all →

#external-secrets

2 stories

Banner: a container blocked at a door because one key is missing from a keyring

DevOps & CI/CD Bug Report

CreateContainerConfigError: couldn't find key in Secret after a secret store rename

John Nguyen · Sep 22, 2026 · 9 min read

New Pods failed with CreateContainerConfigError while old ones kept running. A key renamed in the cloud secret store made External Secrets rewrite the Kubernetes Secret without DATABASE_URL. We show how to find the missing key fast and how to fail before rollout next time.

Banner: comparing approaches to managing Kubernetes secrets in a GitOps workflow

DevOps & CI/CD

Secrets in GitOps: SOPS vs Sealed Secrets vs External Secrets Operator

Ryan Pham · Sep 3, 2025 · 6 min read

GitOps says everything lives in Git, and secrets are the exception that breaks the rule. This guide compares encrypting secrets in Git with SOPS or Sealed Secrets against referencing them from a secret manager with External Secrets Operator or the CSI driver, including rotation and bootstrap.