A Kubernetes controller and tool for one-way encrypted Secrets
Kubernetes Secrets only, encrypted against a key held by the cluster controller and decrypted there.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 9.3k
- Latest
- v0.40.0
- Last push
- 2026-10-01
alternatives to
SOPS
Simple and flexible tool for managing secrets
Side by side
| Tool | Fit | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|---|
| Sealed Secrets | Partial | 9.3k | Apache-2.0 | Open source | No | Go | v0.40.0 | 2026-10-01 |
| dotenvx | Partial | 5.8k | BSD-3-Clause | Open source | No | JavaScript | v2.33.0 | 2026-10-06 |
Every alternative
2 alternatives
a secure dotenv—from the creator of `dotenv`
Encrypts the values in .env files with a public key and decrypts them when the process starts; env files only.
- Language
- JavaScript
- Licence
- BSD-3-Clause
- Stars
- 5.8k
- Latest
- v2.33.0
- Last push
- 2026-10-06
Head to head
About SOPS
- Language
- Go
- Licence
- MPL-2.0
- Stars
- 23k
- Last push
- 2026-10-05