What are Sealed Secrets?

Question

Accepted Answer

**Sealed Secrets** — a way to safely store K8s secrets in Git through encryption.

```bash
helm install sealed-secrets bitnami/sealed-secrets -n kube-system
brew install kubeseal

# Create and encrypt
kubectl create secret generic db-password \
  --from-literal=password=mysecret123 \
  --dry-run=client -o yaml > secret.yaml
kubeseal --format yaml < secret.yaml > sealed-secret.yaml
kubectl apply -f sealed-secret.yaml
```

**SealedSecret YAML:**
```yaml
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  name: db-password
  namespace: production
spec:
  encryptedData:
    password: AgBy3i4OJSWK+PiTySYZZA9rO43cGDEq...
```

**Alternatives:** External Secrets Operator, HashiCorp Vault.

DevOps: What are Sealed Secrets?