Skip to main content
Sealed Secrets encrypts Kubernetes Secrets so they can be safely stored in Git. The controller decrypts them in-cluster at deploy time.

What Radar Shows

Topology: SealedSecret → Secret → workload when Secret metadata is visible, or SealedSecret → workload when Secret reads are restricted. Only SealedSecrets that configure a visible workload are included. SealedSecret Detail View: Encrypted data keys, template metadata, and the target Secret’s scope and namespace.

Supported CRDs