aibot88 Seal Kubernetes Secrets into Git-safe manifests with kubeseal
Encrypt Kubernetes Secret manifests against a Sealed Secrets controller so agents can commit cluster-targeted secrets to Git without exposing plaintext.
Prerequisites
kubeseal CLI, access to the target Sealed Secrets controller certificate or cluster, kubectl-compatible Secret manifest input
Installation
Choose whichever fits your setup:
- Copy this skill folder into your local skills directory.
- Clone the repo and symlink or copy the skill into your agent workspace.
- Add the repo as a git submodule if you manage shared skills centrally.
- Install it through your internal provisioning or packaging workflow.
- Download the folder directly from GitHub and place it in your skills collection.
Install command or upstream instructions:
Install kubeseal from the Sealed Secrets releases or package manager instructions, fetch or reference the target controller certificate as documented upstream, then run kubeseal against a Kubernetes Secret manifest to emit a SealedSecret for Git-safe storage.