Skip to content

Sealed Secrets

GitOps

A Kubernetes utility that lets you store encrypted Secrets safely in Git by converting them into SealedSecrets which only the cluster controller can decrypt.

Track releases GitHub Website
Go Latest v0.38.4 · 23d ago Security brief →

Features

  • Encrypt Kubernetes Secrets into version‑control‑safe SealedSecret resources
  • Controller running in the target cluster is the sole entity able to decrypt SealedSecrets
  • Supports multiple installation methods: Helm, Kustomize, Homebrew, MacPorts, Nixpkgs, and manual Linux builds

Recent releases

View all 20 releases →
No immediate action
v0.38.4 New feature

Cluster controller + client binaries

Open
No immediate action
v0.38.3 New feature

Installation guide update

Open
No immediate action
v0.38.2 Maintenance

Artifact Hub integration + dependency bumps

Open
No immediate action
v0.38.1 New feature

Sealed Secrets v0.38.1 release

Open
No immediate action
v0.38.0 Mixed

Prometheus rule + Go bump + ppc64le

Open

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
9,205
Forks
773
Languages
Go Jsonnet SCSS
View on GitHub

Install & Platforms

Install via
helm macports
Platforms
linux macos

Similar tools

ArgoCD
kubefirst
flux2
Deepfence SecretScanner
helm-secrets

Beta — feedback welcome: [email protected]