Seal a secret sealed-secrets
Create and seal a k8s secret in one pipeline
kubectl create secret generic mysecret --dry-run=client -n <ns> --from-literal=key=value -o yaml | kubeseal -o yaml > sealed.yaml
more sealed-secrets
all 11 commands →
Fetch public cert
kubeseal --fetch-cert --controller-name=sealed-secrets > pub-cert.pem
Seal with offline cert
kubeseal --cert pub-cert.pem -o yaml < secret.yaml > sealed.yaml
List SealedSecrets
kubectl get sealedsecret -A
Seal a secret from file
kubeseal --format=yaml < secret.yaml > sealed-secret.yaml
Seal from stdin with scope
kubectl create secret generic mysecret --dry-run=client --from-literal=token=abc123 -o yaml | kubeseal --scope cluster-wide -o yaml