Kubernetes Secret Encrypt/Decrypt CLI tool
When you create Kubernetes secret YAML manifests with plain text, you are disappointed. But, we can encryption/decription secret manifests.
$ pip install pyyaml
# encryption Kubernetes secret
$ ./k8secode encrypt sample.yaml
apiVersion: v1
data:
password: bXktcEBzc3cwcmQ=
user: YW1zeTgxMA==
kind: Secret
metadata:
name: mysecret
# decryption Kubernetes secret
$ ./k8secode decrypt sample-crypt.yaml
apiVersion: v1
data:
password: my-p@ssw0rd
user: amsy810
kind: Secret
metadata:
name: mysecret
Also, replace file content.
# encryption Kubernetes secret forcely
./k8secode encrypt sample.yaml -f
# decryption Kubernetes secret forcely
./k8secode decrypt sample.yaml -f
k8secode is also use on Docker.