Command-line tool

kubeseal

brew/kubeseal

Checked 25 Oct 2026, 21:09 UTC · Listing refreshed from Homebrew, winget, npm, Scoop and cargo; npm packages checked against OSV.dev

Kubernetes controller and tool for one-way encrypted Secrets

Website Source

At a glance

Type

Command-line tool

Install on

Windows, macOS, Linux

Last checked

25 Oct 2026, 21:09 UTC

Install it

Windows

scoop install kubeseal

macOS

brew install kubeseal

Linux

brew install kubeseal

Encrypt a Kubernetes secret from a YAML file into a SealedSecret (default JSON output)

kubeseal < secret.yaml > sealedsecret.json

Encrypt a secret, outputting it in YAML or JSON format, using a bearer token for API authentication

kubeseal < secret.yaml -o yaml --token my-bearer-token > sealedsecret.yaml

Seal a secret using a specific controller namespace of sealed-secrets controller and name

kubeseal < secret.yaml --controller-namespace controller_namespace --controller-name controller_name > sealedsecret.yaml

Browse

• Docker and Kubernetes

Related command-line tools

• click
  Command-line interactive controller for Kubernetes
• sos
  Distributed, encrypted database for private secrets.
• shush
  Encrypt and decrypt secrets using the AWS Key Management Service
• sops
  Editor of encrypted files security aws secret-management devops azure pgp gcp secret-distribution sops
• ots
  Share end-to-end encrypted secrets with others via a one-time URL
• @hasna/secrets
  Hosted-first secrets vault client for AI agents — CLI, MCP server and SDK against the Hasna secrets API (credentials…
• opentimestamps-client
  Create and verify OpenTimestamps proofs
• cosign
  Container Signing

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents