SOPS is a handy utility for encrypting sensitive content within files while making it easy to edit and track them with standard developer tools (git, diff, vi, etc.). Using the sops-secret-operator, you can deploy encrypted Kubernetes secrets as SopsSecret
custom resources, which are decrypted by the operator and made available as standard Secret
s for general consumption. This allows secrets to be tracked securely in version control, deployed with standard CI/CD tools, and edited securely by developers.
KSOPS is a Kustomize plugin that supports decrypting SOPS files and applying them to your cluster.