ksops ☆
« Back to VersTracker
Description:
Flexible Kustomize Plugin for SOPS Encrypted Resources
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Devops
Tags: kubernetes kustomize sops secrets encryption devops
Install: brew install ksops
About:
ksops is a kustomize plugin that integrates SOPS (Secrets OPerationS) for managing encrypted secrets within Kubernetes manifests. It enables users to decrypt SOPS-encrypted files on-the-fly during the kustomize build process, allowing for secure and version-controlled secret management.
Key Features:
  • Seamless integration with kustomize as an exec plugin
  • Supports multiple KMS and PGP providers via SOPS
  • Enables encrypted secrets in plain YAML manifests
  • Automates decryption during build/deploy pipelines
Use Cases:
  • Managing Kubernetes secrets in GitOps workflows
  • Decrypting SOPS-encrypted resources in CI/CD pipelines
  • Collaborating on Kubernetes configs with sensitive data
Alternatives:
  • sops – SOPS is the underlying encryption tool; ksops acts as the kustomize integration layer for it.
  • sealed-secrets – Sealed-secrets encrypts secrets into SealedSecret resources, whereas ksops decrypts standard Secret resources encrypted with SOPS.
Version History
Detected Version Rev Change Commit
Sep 12, 2025 3:07pm 0 VERSION_BUMP 5176d039
Sep 14, 2024 12:05pm 0 VERSION_BUMP 646aa212
« Back to VersTracker  |  Browse Packages  |  About