jkroepke/helm-secrets

Health v2 · maintenance only

Adoption not part of the score

2025 stars · 154 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

helm-secrets is a Helm plugin that transparently encrypts and decrypts Helm value files using sops, allowing secrets to be safely stored in Git. It also supports injecting secrets from cloud secret managers like AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault via vals expressions.

Use cases

• encrypt helm values files for git
• manage kubernetes secrets in gitops workflow
• decrypt helm value files on the fly
• use sops with helm charts
• inject vault secrets into helm templates
• use helm secrets with argocd
• store encrypted secrets in git for kubernetes

When to choose

• you store Helm value files containing secrets in Git and want them encrypted
• you use GitOps tools like ArgoCD and need secret decryption during deployment
• you want to pull secrets from AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault into Helm values
• you want a mature, widely adopted Helm secrets solution

When to avoid

• you use a different package manager than Helm
• you prefer external secret operators like External Secrets Operator or Sealed Secrets
• you don't need secrets in your Helm values at all

Facets

plugin · maturity active

secrets-management cryptography security configuration-management deployment security cloud-computing infrastructure-as-code self-hosted cli windows cloud helm-plugin sops helm-secrets gitops argocd vault kms encryption value-files kubernetes-secrets devops containers kubernetes linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jkroepke/helm-secrets")