shini4i/kubeseal-auto

An interactive wrapper for kubeseal binary

kubeseal-auto

kubeseal-auto is an interactive wrapper for kubeseal binary used to encrypt secrets for sealed-secrets.

Installation

The recommended way to install this script is pipx:

pipx install kubeseal-auto

Usage

By default, the script will check the version of sealed-secret controller and download the corresponding kubeseal binary to ~/bin directory.

To run the script in fully interactive mode:

kubeseal-auto

Additionally, a "detached" mode is supported:

# Download sealed-secrets certificate for local signing
kubeseal-auto --fetch
# Generate SealedSecret with local certificate
kubeseal-auto --cert <kubectl-context>-kubeseal-cert.crt

Important

In the detached mode kubeseal-auto will not download the kubeseal binary and will look for it in the system $PATH.

To select kubeconfig context:

kubeseal-auto --select

To append or change key values in the existing secret:

kubeseal-auto --edit secret-name.yaml

To reencrypt all secrets in a directory (not working in a detached mode):

kubeseal-auto --re-encrypt /path/to/directory

To back up the encryption and decryption keys (not working in a detached mode):

kubeseal-auto --backup

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

kubeseal-auto's Issues

feat: support multi keys

Context: we run 4 k8s clusters, with different kubeseal keys.

I would like to be able to generate severals kubeseal secrets in a single command.

add support for existing secrets reencryption

1. Find all SealedSecrets in a provided directory
2. Run kubeseal with --re-encrypt flag for each found secret

Upgrade kubernetes version

I am using a newer version of kuberenetes and requesting upgrade on the kubernetes python client api from "23.3.0" to "24.2.0" or even greater.

add support to load secrets from env file

There was an internal request to support loading secrets from the env file.

The user wants to be able to select one of the env files from the list of the files in the current directory.