Jonas Hietala • 5/31/2026

SOPS + Age and Sealed Secrets

This article is part 4 of a Modern Kubernetes homelab series, focusing on secrets management for GitOps. It explains how to use SOPS + Age for encrypting bootstrapping secrets like talosconfig and Terraform files outside the cluster, and Sealed Secrets for in-cluster secret management. The guide covers installation, key generation, encryption/decryption commands, and automation with Just recipes, ensuring secure handling of secrets in a Kubernetes environment.

0 comments

#Kubernetes #Gitops #Sop