We store secrets and values in helm_vars dir structure just like in this repository example dir. All this data versioned in GIT. Working in teams on multiple projects/regions/envs and multiple secrets files at once. We have Makefile in our Helm charts repo to simplify install helm-secrets plugin with helm and other stuff we use. Same Makefile used to rebuild all helm charts with dependencies and some other everyday helpers. Encrypting, Decrypting, Editing secrets on local clones, making #PR's and storing this in our helm charts repo encrypted with PGP, AWS KMS and GCP KMS. Deploying using helm-wrapper from local or from CI with same charts and secrets/values from GIT repository.
Features
- Simple replaceable layer integrated with helm command for encrypting, decrypting, view secrets files stored in any place. Currently using SOPS as backend
- On the fly decryption and cleanup for helm install/upgrade with a helm command wrapper
- Support for YAML/JSON structures encryption - Helm YAML secrets files
- Encryption per value where visual Diff should work even on encrypted files
- Multiple key management solutions like PGP, AWS KMS and GCP KMS at same time
- With AWS KMS permissions management for keys
- Secrets files directory tree separation with recursive .sops.yaml files search
Categories
Container ManagementLicense
Apache License V2.0Follow Plugin for secrets management in Helm
Other Useful Business Software
Award-Winning Medical Office Software Designed for Your Specialty
RXNT is an ambulatory healthcare technology pioneer that empowers medical practices and healthcare organizations to succeed and scale through innovative, data-backed, AI-powered software.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of Plugin for secrets management in Helm!