#secrets

External Secrets is a GitOps term for a pattern that syncs secrets from a protected external store into the runtime. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation; Flux documentation.

“The team used External Secrets before lunch, so the release did not sprint into production wearing untied shoes.”

Sealed Secrets is a GitOps term for encrypted Kubernetes secrets that a controller can decrypt inside the cluster. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation; Flux documentation.

“The team used Sealed Secrets before lunch, so the release did not sprint into production wearing untied shoes.”

Secret Sealing is a GitOps term for encrypting a secret so it can be safely stored in a repository. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation; Flux documentation.

“The team used Secret Sealing before lunch, so the release did not sprint into production wearing untied shoes.”

SOPS is a GitOps term for a file encryption workflow used to protect secrets in GitOps repositories. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Flux documentation.

“The team used SOPS before lunch, so the release did not sprint into production wearing untied shoes.”