CmdID

CmdID / Commands

kubeseal

Client-side utility for encrypting Kubernetes secrets using the Bitnami Sealed Secrets controller. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Client-side utility for encrypting Kubernetes secrets using the Bitnami Sealed Secrets controller. Creates SealedSecret resources that can be safely stored in version control. Requires a controller running in the cluster (e.g., installed via kubectl apply --filename controller.yaml).

Encrypt a Kubernetes secret from a YAML file into a SealedSecret (default JSON output)

kubeseal <secret.yaml >sealedsecret.jsonIdentify

Encrypt a secret, outputting it in YAML or JSON format, using a bearer token for API authentication

kubeseal <secret.yaml --format yaml --token my-bearer-token >sealedsecret.yamlIdentify

Seal a secret using a specific controller namespace of sealed-secrets controller and name

kubeseal <secret.yaml --controller-namespace controller_namespace --controller-name controller_name >sealedsecret.yamlIdentify

Encrypt a raw secret value from a file with a specified name and scope

kubeseal --raw --from-file path/to/secret.txt --name my-secret --scope strict >sealedsecret.yamlIdentify

Fetch the controller's public certificate for offline sealing with basic auth

kubeseal --fetch-cert --username username --password password >cert.pemIdentify

Seal a secret offline using a fetched certificate

kubeseal <secret.yaml --cert cert.pem >sealedsecret.yamlIdentify

Merge a secret into an existing SealedSecret file in-place

kubeseal <secret.yaml --merge-into sealedsecret.yamlIdentify

Validate a SealedSecret without applying it

kubeseal <sealedsecret.yaml --validateIdentify