TiloBox
Back to directory
Sealed Secrets project preview
SecurityAlternative to AWS Secrets ManagerAlternative to DopplerAlternative to HashiCorp Vault

Sealed Secrets

Asymmetric encryption controller for Kubernetes secrets safe to store in public Git.

View on GitHub
LicenseApache-2.0
GitHub stars7.5k
Last commit1 weeks ago
Tags6 topics
Kubernetes SecretsDevopsAsymmetric EncryptionSecurityGitops SecurityGolang
Overview

Why consider Sealed Secrets?

Sealed Secrets is an open-source Kubernetes controller created by Bitnami in Go. It encrypts sensitive Secret manifests asymmetrically into SealedSecret Custom Resources that can only be decrypted by the in-cluster controller, making GitOps repository storage 100% safe.

Guided learning

Learn Sealed Secrets by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of Sealed Secrets

Sealed Secrets seals Kubernetes secrets offline with public keys while private decryption keys stay isolated inside clusters.

Quickstart

bash
1# Seal a secret
2kubeseal --format=yaml < secret.yaml > sealedsecret.yaml
3kubectl apply -f sealedsecret.yaml

Sealed Secrets is licensed under the Apache License Version 2.0.

Related tools

More options with a similar category or technology profile.

boringproxy logo

boringproxy

Simple, self-hosted reverse proxy and tunnel manager for exposing private web services securely.

OWASP ModSecurity logo

OWASP ModSecurity

Open-source Web Application Firewall (WAF) engine providing cross-platform HTTP security inspection.

OpenCTI logo

OpenCTI

Open-source platform for managing cyber threat intelligence knowledge and STIX2 relationships.

Maltrail logo

Maltrail

Malicious traffic detection system utilizing public blacklists and heuristic traffic behavior analysis.

Sealed Secrets FAQs

Sealed Secrets is listed as a Security tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

Sealed Secrets is listed under the Apache-2.0 license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

Sealed Secrets is listed as an alternative to AWS Secrets Manager. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.