An open API service indexing awesome lists of open source software.

https://github.com/satishkumarsk/kubedec

A cli tool in golang to decrypt "Sealed Secrets" for Kubernetes "https://github.com/bitnami-labs/sealed-secrets"
https://github.com/satishkumarsk/kubedec

devops-workflow k8s k8s-secret kubernetes kubernetes-secrets sealed-secrets sealed-secrets-controller

Last synced: 5 months ago
JSON representation

A cli tool in golang to decrypt "Sealed Secrets" for Kubernetes "https://github.com/bitnami-labs/sealed-secrets"

Awesome Lists containing this project

README

          

# kubedec
[![Build Status](https://travis-ci.com/satishkumarsk/kubedec.svg?branch=master)](https://travis-ci.com/satishkumarsk/kubedec)[![codecov](https://codecov.io/gh/satishkumarsk/kubedec/branch/master/graph/badge.svg)](https://codecov.io/gh/satishkumarsk/kubedec)

The cli will decrypt the encrypted yaml generated by sealed secrets using kubeseal https://github.com/bitnami-labs/sealed-secrets

Descrption:
Its hard to view the encrypted yaml once sealed using kubeseal . This CLI allows to decrypt the yaml and validate the encrypted values incase you need

## To get master key
```bash
$ kubectl get secret -n kube-system sealed-secrets-key -o yaml >master.key
```

## NOTE: master key is the controller's public + private key and should be kept really safe!!!


## Installation
See https://github.com/satishkumarsk/kubedec/releases for the latest release and detailed installation instructions.

## To build
To build the `kubedec` and controller binaries, run:
```bash
$ make install && make build
```
Note: binary would be generated under target folder

## Kubedec cli in action

![](kubedec.gif)

## How to use
```bash
$ kubedec -k -f
```