kubedec

The cli will decrypt the encrypted yaml generated by sealed secrets using kubeseal https://github.com/bitnami-labs/sealed-secrets

Descrption: Its hard to view the encrypted yaml once sealed using kubeseal . This CLI allows to decrypt the yaml and validate the encrypted values incase you need

To get master key

$ kubectl get secret -n kube-system sealed-secrets-key -o yaml >master.key

NOTE: master key is the controller's public + private key and should be kept really safe!!!

Installation

See https://github.com/satishkumarsk/kubedec/releases for the latest release and detailed installation instructions.

To build

To build the kubedec and controller binaries, run:

$ make install && make build

Note: binary would be generated under target folder

Kubedec cli in action

How to use

$ kubedec -k <fullpath/to/your/secretkey> -f </fullpath/to/your/sealedyaml>