Kubeseal

External

• https://github.com/bitnami-labs/sealed-secrets

Internal

• Kubernetes

Overview

kubeseal encrypts a secret into a sealed secret, which is safe to store - even to a public repository. The sealed secret can be decrypted only by the controller running in the target cluster and nobody else (not even the original author) is able to obtain the original secret from the sealed secret.