Skip to main content

kubeseal-auto

kubeseal-auto is an interactive wrapper for kubeseal binary used to encrypt secrets for sealed-secrets.

GitHub Actions codecov PyPI - Python Version PyPI license

Showcase

Installation

The recommended way to install this script is pipx:

pipx install kubeseal-auto

Usage

By default, the script will check the version of sealed-secret controller and download the corresponding kubeseal binary to ~/bin directory.

To run the script in fully interactive mode:

kubeseal-auto

Additionally, a "detached" mode is supported:

# Download sealed-secrets certificate for local signing
kubeseal-auto --fetch
# Generate SealedSecret with local certificate
kubeseal-auto --cert <kubectl-context>-kubeseal-cert.crt

[!IMPORTANT] In the detached mode kubeseal-auto will not download the kubeseal binary and will look for it in the system $PATH.

To select kubeconfig context:

kubeseal-auto --select

To append or change key values in the existing secret:

kubeseal-auto --edit secret-name.yaml

To reencrypt all secrets in a directory (not working in a detached mode):

kubeseal-auto --re-encrypt /path/to/directory

To back up the encryption and decryption keys (not working in a detached mode):

kubeseal-auto --backup

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Metadata

Release files for kubeseal-auto 0.7.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for kubeseal-auto 0.7.1
File Size Uploaded Provenance Actions
kubeseal_auto-0.7.1.tar.gz 21.1 kB Without provenance Details for kubeseal_auto-0.7.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for kubeseal-auto 0.7.1
File Interpreter ABI Platform Actions
kubeseal_auto-0.7.1-py3-none-any.whl Python 3 none any Details for kubeseal_auto-0.7.1-py3-none-any.whl

Total release size: 49.9 kB

Release files / kubeseal_auto-0.7.1.tar.gz

Download URL kubeseal_auto-0.7.1.tar.gz
Size 21.1 kB
Tags Source
SHA-256 checksum
How to use checksums
dcf77e60362d0ffa0840e6a0c6c77fb2b29189d0657fd982778d9dd703d875c9
BLAKE2b-256 checksum
How to use checksums
844f18c7bb1d451dcb9a6a2c6956e07e1df836c5a64378e29a2ad43e4fe11937
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.21 {"installer":{"name":"uv","version":"0.11.21","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Release files / kubeseal_auto-0.7.1-py3-none-any.whl

Download URL kubeseal_auto-0.7.1-py3-none-any.whl
Size 28.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
2ced576bcbda85c1d8442c2b57c3ae5355e9437145f5dcc7cefb75f36d8b997a
BLAKE2b-256 checksum
How to use checksums
eb701025d575526446a814eec66c4a82c486da40a38d9e10f2013c9843d395f4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.21 {"installer":{"name":"uv","version":"0.11.21","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Security for kubeseal-auto 0.7.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page