An interactive wrapper for kubeseal binary
Project description
kubeseal-auto
kubeseal-auto is an interactive wrapper for kubeseal binary used to encrypt secrets for sealed-secrets.
Installation
The recommended way to install this script is pipx:
pipx install kubeseal-auto
Usage
By default, the script will check the version of sealed-secret controller and download the corresponding kubeseal binary to ~/bin directory.
To run the script in fully interactive mode:
kubeseal-auto
Additionally, a "detached" mode is supported:
# Download sealed-secrets certificate for local signing
kubeseal-auto --fetch
# Generate SealedSecret with local certificate
kubeseal-auto --cert <kubectl-context>-kubeseal-cert.crt
Note: In the detached mode kubeseal-auto will not download the kubeseal binary and will look for it in the system $PATH.
To select kubeconfig context:
kubeseal-auto --select
To append or change key values in the existing secret:
kubeseal-auto --edit secret-name.yaml
To reencrypt all secrets in a directory (not working in a detached mode):
kubeseal-auto --reencrypt /path/to/directory
To back up the encryption and decryption keys (not working in a detached mode):
kubeseal-auto --backup
Contributing
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for kubeseal_auto-0.4.3-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | fb4d9080c85e2cea7423974ea1db9f34213843fb476996098df3c52d4e9f04a3 |
|
MD5 | fd186812c9c2c857606a25de0b45f8f3 |
|
BLAKE2b-256 | 36a8d3406f3e71dd63b859b4dd3d7600c6e8f2f6d0f9e86b0c4e7d9cde1cf690 |