All Tools
S
Dev ToolsFreeOpen Source
SOPS
Encrypt secrets in Git with age, PGP, or cloud KMS
MPL-2.0
ABOUT
Helm values and .env files with API keys cannot sit in Git unencrypted, but sealed-secret controllers are heavy for small teams. sops encrypts only the secret values in YAML so diffs stay readable and CI decrypts with KMS or age at apply time.
INSTALL
brew install sopsINTEGRATION GUIDE
1. Store OpenAI and cloud keys in encrypted YAML next to Helm values
2. Decrypt secrets in CI with AWS KMS or age before applying a serving stack
3. Keep dotenv files for local agent configs in Git without plaintext keys
4. Review secret-file diffs because only values are ciphertext, keys stay clear
TAGS
secretsencryptiongitopskmsyamldevops