argocd-vault-plugin
« Back to VersTracker
Description:
Argo CD plugin to retrieve secrets from Secret Management tools
Type: Formula  |  Latest Version: 1.18.1@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Devops
Tags: kubernetes argo-cd secrets vault devops gitops
Install: brew install argocd-vault-plugin
About:
Argo CD Vault Plugin is an Argo CD plugin that retrieves secrets from external Secret Management tools like HashiCorp Vault, Azure Key Vault, or AWS Secrets Manager. It allows you to manage Kubernetes secrets declaratively without storing sensitive data in Git. This integration ensures that your GitOps workflows remain secure while leveraging your existing secret management infrastructure.
Key Features:
  • Supports multiple secret management backends (Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager)
  • Generates Kubernetes secrets dynamically at runtime
  • Seamless integration with Argo CD's declarative GitOps workflow
  • Supports templating within Kubernetes manifests
  • No secrets stored in Git repositories
Use Cases:
  • Managing Kubernetes secrets in a GitOps workflow without exposing sensitive data in version control
  • Centralizing secret management across multiple clusters and environments
  • Rotating secrets frequently without manual Git updates
Alternatives:
  • Sealed Secrets – Sealed Secrets encrypts secrets for Git storage, while argocd-vault-plugin fetches them dynamically from external vaults
  • External Secrets Operator – ESO runs as a cluster operator, while argocd-vault-plugin is an Argo CD plugin that works during manifest generation
Version History
Detected Version Rev Change Commit
Sep 13, 2025 8:42am 0 VERSION_BUMP 63339b3c