# zendesk/helm-secrets

DEPRECATED A helm plugin that help manage secrets with Git workflow and store them anywhere

Repository: https://github.com/zendesk/helm-secrets
Canonical: https://ross.abutalabs.com/products/zendesk-helm-secrets
Language: Shell
License: Apache-2.0
License Family: permissive
Topics: helm, helm-plugin, kubernetes, k8s, helm-charts, kubernetes-secrets, sops, pgp, kms, encryption-tool, encryption, decryption, secret-management, secrets, secrets-stored
Archived: true
Last push: 2020-12-23T08:32:38+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3414, "days_push": 2079, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1146, forks 149 (observed 2026-08-28T04:03:45.721100+00:00)

## What it is
A deprecated Helm plugin that manages encrypted secrets files (YAML/JSON) within Git workflows, using SOPS as its backend for per-value encryption with PGP, AWS KMS, and GCP KMS. It wraps helm commands to decrypt secrets on the fly during install/upgrade and supports cleartext git diffs.

## Use cases
- manage encrypted helm values files in git
- encrypt kubernetes secrets with sops
- decrypt secrets on the fly during helm install
- store helm secrets with aws kms or gcp kms
- view cleartext git diffs of encrypted secret files
- share secrets safely across a team via pull requests

## When to choose
- you are already locked into this plugin's workflow and cannot migrate
- you need a historical reference for how helm-secrets integrations worked

## When to avoid
- starting a new project - use the active fork jkroepke/helm-secrets instead
- you need support, bug fixes, or compatibility with modern helm versions
- you want a maintained secrets management solution for kubernetes

## Facets
- artifact type: plugin
- maturity: abandoned
- function: secrets-management, cryptography, deployment, cli
- domain: security, self-hosted
- platform: cli, cloud
- tags: helm-plugin, helm-secrets, sops, kubernetes-secrets, deprecated, gitops, pgp, aws-kms, gcp-kms, devops, containers, kubernetes, docker

## Member repositories
- zendesk/helm-secrets (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:45.721100+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:34:13.713001+00:00, confidence not recorded.
  - readme: https://github.com/zendesk/helm-secrets (fetched 2026-08-28T04:03:45.721100+00:00, sha 5ff06681e5aa)
- Data as of 2026-08-30T08:39:29.467469+00:00.