SOPS
Command-line tool that encrypts individual values inside YAML, JSON, and other config files, so secrets can be safely committed to git.
Overview
SOPS (Secrets OPerationS) encrypts just the values in a structured file - not the whole file - so a git diff still shows which keys changed, while the actual secret values stay encrypted using a key management backend like AWS KMS, GCP KMS, or PGP. This lets a team keep secrets alongside the rest of their configuration in version control instead of storing them separately.
SOPS is a fit for teams practicing GitOps who need secrets to live safely inside the same git repository as everything else, commonly paired with tools like Flux or Argo CD (also in this catalog) that sync configuration from git.
- Categories
- DevOps
- Languages
- Go
- License
- MPL-2.0
Related Projects
Argo CD
Apache-2.0The leading GitOps continuous delivery tool for Kubernetes, automatically syncing your cluster state to match what's defined in git.
- DevOps
Flagger
Apache-2.0Progressive delivery operator that automates canary, blue-green, and A/B deployments for Kubernetes with automatic rollback on failure.
- DevOps
Flux
Apache-2.0GitOps continuous delivery tool for Kubernetes that keeps a cluster's state synchronized with a git repository, a genuine alternative to Argo CD.
- DevOps
Ansible
GPL-3.0Radically simple IT automation platform for configuration management, deployment and orchestration.
- DevOps
Spotted an error? Suggest an edit on GitHub.