Sealed Secrets provides declarative Kubernetes Secret Management in a secure way. Since the Sealed Secrets are encrypted, they can be safely stored in a code repository. This enables an easy-to-implement GitOps flow that is very popular among the OSS community. Sealed Secrets offers a powerful CLI tool (kubeseal) to one-way encrypt your Kubernetes Secret easily. The Sealed Secrets controller will decrypt any Sealed Secret into its equivalent Kubernetes Secret. Sealed Secrets are safe to store in your local code repository, along with the rest of your configuration.
Features
- One-way Encryption
- Sealing key renewal
- Sealed Secrets Metrics
- SealedSecrets are a "write only" device
- Sealing keys are automatically renewed every 30 days
- The Sealed Secrets Controller running in Kubernetes exposes Prometheus metrics
Categories
Container ManagementLicense
Apache License V2.0Follow Sealed Secrets for Kubernetes
Other Useful Business Software
Build Securely on AWS with Proven Frameworks
Moving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of Sealed Secrets for Kubernetes!