Homepage Grid

On your command line

Sealed Secrets offers a powerful CLI tool (kubeseal) to one-way encrypt your Kubernetes Secret easily.

On your K8S cluster

The Sealed Secrets controller will decrypt any Sealed Secret into its equivalent Kubernetes Secret

On your code repository

Sealed Secrets are safe to store in your local code repository, along with the rest of your configuration.