Fetch public cert sealed-secrets

Seal with offline cert kubeseal --cert pub-cert.pem -o yaml < secret.yaml > sealed.yaml List SealedSecrets kubectl get sealedsecret -A Seal a secret from file kubeseal --format=yaml < secret.yaml > sealed-secret.yaml Seal from stdin with scope kubectl create secret generic mysecret --dry-run=client --from-literal=token=abc123 -o yaml | kubeseal --scope cluster-wide -o yaml Fetch public certificate kubeseal --fetch-cert --controller-name=sealed-secrets --controller-namespace=kube-system > pub.pem