Sealed Secrets
A Kubernetes controller and command-line tool that encrypts Secrets so they can be stored in Git.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About Sealed Secrets
Sealed Secrets lets you keep Kubernetes Secrets in a Git repository without exposing their values. You encrypt a Secret with the command-line tool into a SealedSecret, which only the controller running in your cluster can decrypt. The encryption is one-way, so the sealed file is safe to commit and review.
It suits teams using GitOps workflows who want secret configuration versioned alongside the rest of their manifests. A Helm chart is included in the repository.
Strengths
- Encrypted Secrets are safe to commit to Git
- Fits GitOps workflows
- Helm chart included
- Widely used project
Limitations
- Only useful with a Kubernetes cluster
- Requires running a controller in the cluster
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- Bitnami
- Platforms
- Self-hosted, Command line
- How it runs
- Downloadable app, Self-hosted
- Account
- Not required
- Best suited for
- Kubernetes teams keeping secrets in Git with a GitOps workflow
- Categories
- Encryption tools, Developer tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Sealed Secrets
Compare allSoftware that can replace Sealed Secrets for an important use case, and what changes if you switch.
SOPS
Encrypts values inside YAML, JSON and env files so they can live in Git.
SOPS encrypts values inside YAML, JSON and env files for Git without an in-cluster controller. It works with age, PGP and cloud key services, and it is not limited to Kubernetes.
git-crypt
A command-line tool that transparently encrypts selected files in a Git repository.
git-crypt transparently encrypts selected files in any Git repository from the command line with no Kubernetes controller. It is not designed around Kubernetes Secrets or GitOps workflows.
transcrypt
A shell script that transparently encrypts chosen files stored in a Git repository.
transcrypt is a shell script that encrypts chosen files in a Git repository on commit. It relies on a shared password rather than per-user keys and has no Kubernetes integration.
Similar software
Related functionality, not necessarily a direct replacement.
Infisical
Open-source platform for storing and distributing application secrets.
Doppler
Hosted secrets manager that syncs environment variables across environments.
Helm
A package manager for Kubernetes that installs, upgrades and rolls back applications described as charts.
Kustomize
A template-free tool for customising Kubernetes YAML configurations without forking them.
Helmfile
A command-line tool for declaratively deploying sets of Helm charts, manifests and Kustomize configs.
Kubernetes
An open-source system for automating deployment, scaling and management of containerized applications across machines.
