An interactive wrapper for kubeseal binary
Project description
kubeseal-auto
kubeseal-auto is an interactive wrapper for kubeseal binary used to encrypt secrets for sealed-secrets.
Installation
The recommended way to install this script is pipx:
pipx install kubeseal-auto
Usage
By default, the script will check the version of sealed-secret controller and download the corresponding kubeseal binary to ~/bin directory.
To run the script in fully interactive mode:
kubeseal-auto
Additionally, a "detached" mode is supported:
# Download sealed-secrets certificate for local signing
kubeseal-auto --fetch
# Generate SealedSecret with local certificate
kubeseal-auto --cert <kubectl-context>-kubeseal-cert.crt
Note In the detached mode kubeseal-auto will not download the kubeseal binary and will look for it in the system $PATH.
To select kubeconfig context:
kubeseal-auto --select
To append or change key values in the existing secret:
kubeseal-auto --edit secret-name.yaml
To reencrypt all secrets in a directory (not working in a detached mode):
kubeseal-auto --re-encrypt /path/to/directory
To back up the encryption and decryption keys (not working in a detached mode):
kubeseal-auto --backup
Contributing
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for kubeseal_auto-0.4.7-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | db78a3ab8349f3fd45fd8b82d5ba31d7f6201b920fe18691f83c4c66533ef4a3 |
|
MD5 | e8f7bc51ad1ccf5ecb7def61a9d7cca9 |
|
BLAKE2b-256 | 8d85c84d8021ca1095463538980f691f8a18530857eafaac05bc5ab896beb261 |