Skip to main content

An interactive wrapper for kubeseal binary

Project description

kubeseal-auto

The script is an interactive wrapper for kubeseal binary used to encrypt secrets for sealed-secrets.

demo

Installation

pipx can be used to install the script:

pipx install kubeseal-auto

Usage

By default, the script will check the version of sealed-secret controller and download the corresponding kubeseal binary to ~/bin directory.

To run the script in fully interactive mode:

kubeseal-auto

Additionally, a "detached" mode is supported:

# Download sealed-secrets certificate for local signing
kubeseal-auto --fetch
# Generate SealedSecret with local certificate
kubeseal-auto --cert <kubectl-context>-kubeseal-cert.crt

Note: In the detached mode kubeseal-auto will not download the kubeseal binary and will look for in $PATH.

To select kubeconfig context:

kubeseal-auto --select

To append or change key values in the existing secret:

kubeseal-auto --edit secret-name.yaml

To reencrypt all secrets in a directory (not working in a detached mode):

kubeseal-auto --reencrypt /path/to/directory

To back up the encryption keys (not working in a detached mode):

kubeseal-auto --backup

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

kubeseal-auto-0.4.0.tar.gz (6.9 kB view hashes)

Uploaded Source

Built Distribution

kubeseal_auto-0.4.0-py3-none-any.whl (8.0 kB view hashes)

Uploaded Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page