awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
external-secrets avatar

external-secrets/external-secrets

0
View on GitHub↗
external-secrets.io/main↗

External Secrets

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

Features

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
External Secret Resolution - Manages secret synchronization between external secret stores and Kubernetes using custom resource definitions.
  • Secret Backend Abstraction Layers - Defines a common interface for pluggable integration with external secret backends.
  • Secret Store Integrations - Binds ExternalSecret resources to specific provider configurations through SecretStore objects.
  • Custom Resource Controllers - Watches custom resources and reconciles desired state with actual Kubernetes Secrets using a controller loop.
  • Polling-Based Synchronization Controllers - Implements a controller that periodically polls external providers to update Kubernetes Secrets.
  • Cluster-Scoped Secret Stores - Defines cluster-scoped custom resources for managing secrets across all namespaces.
  • Automated Secret Rotation - Keeps Kubernetes Secrets in sync with external sources as values change without manual intervention.
  • Cloud Secret Managers - Manages secret lifecycle across Kubernetes clusters by connecting to external secret stores.
  • External API Secret Synchronizers - Synchronizes secret values from external APIs and services into Kubernetes Secrets using custom resource definitions.
  • External Provider Secret Injectors - Reads secrets from external providers and automatically creates or updates native Kubernetes Secrets.
  • Secret Management Providers - Connects to various external secret management services and synchronizes their values into a Kubernetes cluster.
  • Custom Resource Secret Controllers - Defines and controls secret synchronization using custom resource definitions for external stores.
  • Secret Injection Providers - Reads secret values from external systems and injects them automatically as native Kubernetes Secrets.
  • Secret Templates - Transforms raw secret values into structured Kubernetes Secret data using Go templates.
  • Defending - Listed in the “Defending” section of the Awesome K8s Security awesome list.
  • Security and Compliance - Syncs external secrets into Kubernetes.
  • 6,697 stars·1,337 forks·Go·Apache-2.0·23 views

    Star history

    Star history chart for external-secrets/external-secretsStar history chart for external-secrets/external-secrets

    How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

    Frequently asked questions

    What does external-secrets/external-secrets do?

    External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

    What are the main features of external-secrets/external-secrets?

    The main features of external-secrets/external-secrets are: External Secret Resolution, Secret Backend Abstraction Layers, Secret Store Integrations, Custom Resource Controllers, Polling-Based Synchronization Controllers, Cluster-Scoped Secret Stores, Automated Secret Rotation, Cloud Secret Managers.

    Which projects share features with external-secrets/external-secrets?

    Projects with overlapping indexed features include: kubernetes-sigs/secrets-store-csi-driver — The Secrets Store Container Storage Interface driver is a Kubernetes storage plugin that enables pods to mount… jenkins-x/jx — jx is a GitOps delivery platform and Kubernetes CI/CD orchestrator designed to automate the building and deployment of… jenkinsci/configuration-as-code-plugin — The configuration-as-code plugin for Jenkins translates automation server settings and plugin parameters into… helmfile/helmfile — Helmfile is a declarative tool for managing Kubernetes Helm releases across multiple environments. It defines the… snyk/snyk — Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source… usebruno/bruno — Bruno is a local-first API client designed for building, testing, and managing network requests across a wide range of…

    Projects sharing features with External Secrets

    These projects share indexed features with External Secrets. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
    • kubernetes-sigs/secrets-store-csi-driverkubernetes-sigs avatar

      kubernetes-sigs/secrets-store-csi-driver

      1,541View on GitHub↗

      The Secrets Store Container Storage Interface driver is a Kubernetes storage plugin that enables pods to mount sensitive data from external secret management services directly into container volumes. By utilizing the standard container storage interface, it allows applications to access credentials as files within the file system, ensuring that sensitive information is held in memory rather than persisted to the node disk. The driver distinguishes itself by providing a unified interface for multi-provider integration, allowing clusters to connect to various external secret management services

      Goaws-secrets-managerazure-keyvaultcsi
      View on GitHub↗1,541
    • jenkins-x/jxjenkins-x avatar

      jenkins-x/jx

      4,691View on GitHub↗

      jx is a GitOps delivery platform and Kubernetes CI/CD orchestrator designed to automate the building and deployment of applications. It functions as a cloud native pipeline manager that executes container-based build and deployment sequences using a catalog of reusable tasks. The project distinguishes itself through the automated orchestration of preview environments, which are created and destroyed based on pull request activity to enable validation before merging. It employs a GitOps-based state synchronization model to maintain the desired state of clusters by polling git repositories and

      Goacceleratorcicdcontinuous-delivery
      View on GitHub↗4,691
    • jenkinsci/configuration-as-code-pluginjenkinsci avatar

      jenkinsci/configuration-as-code-plugin

      2,790View on GitHub↗

      The configuration-as-code plugin for Jenkins translates automation server settings and plugin parameters into human-readable YAML files, enabling reproducible server environments and version-controlled infrastructure management. It replaces manual web interface setup tasks with declarative text-based definitions for administrative settings, authentication backends, and access control. The system features dynamic data-binding capabilities that map text definitions directly to component properties using reflection and type inspection, alongside dynamic schema generation that produces validation

      Javaconfiguration-as-codehacktoberfestjcasc
      View on GitHub↗2,790
    • helmfile/helmfilehelmfile avatar

      helmfile/helmfile

      4,987View on GitHub↗

      Helmfile is a declarative tool for managing Kubernetes Helm releases across multiple environments. It defines the desired state of releases in version-controlled YAML files and synchronizes the cluster to match that state, acting as both a release manager and a state sync orchestrator. The tool layers environment-specific values, secrets, and lifecycle hooks onto shared release definitions, enabling consistent multi-environment deployments. Helmfile distinguishes itself through several integrated capabilities: it generates separate dependency lockfiles per environment for staged rollout of ch

      Gohelmkuberneteskustomize
      View on GitHub↗4,987
    Compare all 30 related projects→

    Curated searches featuring External Secrets

    Hand-picked collections where External Secrets appears.
    • Environment Variable Management Tools
    • Secret Management Tools
    • DevOps & Infrastructure