Feature: sops publish to kubernetes secrets
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 23.1k
- Forks
- 1.1k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 9
Description
I have been using SOPS extensively in the past, and it would be super nice if the command
sops publish would be able to upload files content to k8s secrets.
At the moment I am encrypting the full or partial manifest, and then I have to run:
sops -d ./whatever.sops.yaml | kubectl apply -f -
Though, it would be nice to find a solution to use just one command.
The proper way to do this might be using external-secrets, but for now this is just done for my homelab setup, and I am trying to avoid overcomplicating things, or just adding extra operators/software running just to solve something simple. sops publish can push to hashicorp vault, and then external secrets can fetch it from there, but I wish I could skip those two component and keep it simple stupid :D
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the existing sops publish command and the documented sops -d ... | kubectl apply -f - workflow. Define how encrypted files map to Kubernetes secrets, then confirm that one command can publish them without the Vault and external-secrets components.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- cli, devops, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100