# Seal Kubernetes Secrets into Git-safe manifests with kubeseal

> Encrypt Kubernetes Secret manifests against a Sealed Secrets controller so agents can commit cluster-targeted secrets to Git without exposing plaintext.

- Skill: `agentskillexchange/seal-kubernetes-secrets-into-git-safe-manifests-with-kubesea` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/seal-kubernetes-secrets-into-git-safe-manifests-with-kubesea`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/seal-kubernetes-secrets-into-git-safe-manifests-with-kubesea/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/seal-kubernetes-secrets-into-git-safe-manifests-with-kubesea

---


# Seal Kubernetes Secrets into Git-safe manifests with kubeseal

Encrypt Kubernetes Secret manifests against a Sealed Secrets controller so agents can commit cluster-targeted secrets to Git without exposing plaintext.

## Prerequisites

kubeseal CLI, access to the target Sealed Secrets controller certificate or cluster, kubectl-compatible Secret manifest input

## Installation

Use the upstream install or setup path that matches your environment:
- brew install kubeseal
- go install github.com/bitnami-labs/sealed-secrets/cmd/kubeseal@main

Requirements and caveats from upstream:
- [![Download Status](https://img.shields.io/docker/pulls/bitnami/sealed-secrets-controller.svg)](https://hub.docker.com/r/bitnami/sealed-secrets-controller)
- (requires secure access to the Kubernetes API server), which is
- A cluster administrator must have already installed the SealedSecret CRDs.

Basic usage or getting-started notes:
- <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
- [Usage](#usage)
- The [Usage](#usage) section explores in more detail how you craft SealedSecret resources.

- Source: https://github.com/bitnami-labs/sealed-secrets
- Extracted from upstream docs: https://raw.githubusercontent.com/bitnami-labs/sealed-secrets/HEAD/README.md

## Documentation

- https://github.com/bitnami-labs/sealed-secrets#readme

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/seal-kubernetes-secrets-into-git-safe-manifests-with-kubeseal/)