https://github.com/gopasspw/kubectl-gopass

Plugin for kubectl to support reading and writing secrets directly from/to gopass
https://github.com/gopasspw/kubectl-gopass

gopass kubectl kubectl-plugin kubernetes password secrets

Last synced: 2 months ago
JSON representation

Plugin for kubectl to support reading and writing secrets directly from/to gopass

• Host: GitHub
• URL: https://github.com/gopasspw/kubectl-gopass
• Owner: gopasspw
• License: mit
• Created: 2019-08-14T17:23:42.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2020-10-20T21:34:41.000Z (about 4 years ago)
• Last Synced: 2024-11-02T06:31:43.695Z (2 months ago)
• Topics: gopass, kubectl, kubectl-plugin, kubernetes, password, secrets
• Language: Shell
• Size: 10.7 KB
• Stars: 40
• Watchers: 5
• Forks: 2
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-kubectl-plugins - kubectl-gopass
• awesome-starred - gopasspw/kubectl-gopass - Plugin for kubectl to support reading and writing secrets directly from/to gopass (kubernetes)

README

        
# kubectl-gopass

A [plugin for kubectl](https://kubernetes.io/docs/tasks/extend-kubectl/kubectl-plugins/) to support reading and writing secrets directly from/to [gopass](https://github.com/gopasspw/gopass).

## Installation:

Currently, you need to download the shell script, put it in your path and make it executable.

It's also available via [krew](https://github.com/kubernetes-sigs/krew).

Gopass and kubectl is required for all functionality, jq and yq are required for fetching secrets from kubernetes to gopass. 

## Usage:

    # kubectl gopass apply [optional kubectl apply params] my-secret

applies secret "my-secret" via kubectl. Namespace and other params can be

specified and are passed through to kubectl.

    # kubectl gopass apply-recursive [optional kubectl apply params] my-secret-path

like apply but takes a path and applies all secrets below that path

    # kubectl gopass diff [optional kubectl apply params] my-secret

shows the secret diff of "my-secret" via kubectl. Namespace and other 

params can be specified and are passed through to kubectl.

    # kubectl gopass diff-recursive [optional kubectl apply params] my-secret-path

like diff but takes a path and applies all secrets below that path

    

    # kubectl gopass create my-new-secret

create a new secret prefilled with a kubernetes secret template and starts

an editor to edit the newly created secret

    # kubectl gopass fetch [optional kubectl get secret params] secret-name dir/to/gopass-secret

fetches a secret with name from the kubernetes cluster and stores in in gopass as dir/to/gopass-secret

    # kubectl gopass fetchrecursive [optional kubectl get secret params] dir/to/gopass-secret-path

fetches all secrets from the kubernetes cluster (namespace) and stores them in gopass dir/to/gopass-secret-path

    # kubectl gopass version

prints out the kubectl-gopass version ($VERSION)

    # kubectl gopass help

prints these usage instructions

## Contributions

are welcome :-)