external-secrets helm

External Secrets is a Kubernetes operator that synchronizes secrets from external secret management systems (e.g., AWS Secrets Manager, HashiCorp Vault, Google Secret Manager, 1Password) into Kubernetes secrets. It ensures that sensitive data stays outside the cluster while being securely referenced within applications. External Secrets supports automatic synchronization, templating, and multi-backend integration, making it a scalable and secure solution for managing secrets in Kubernetes environments.

More popular helm chart found

external-secrets from external-secrets is more popular with 96 repositories.

Install

Install with:

helm repo add external-secrets oci://ghcr.io/external-secrets/charts/external-secrets
helm install external-secrets external-secrets/external-secrets -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 36)

NameRepoStarsVersionTimestamp
external-secretsszinn/k8s-homelab2210.15.0a day ago
external-secretsszinn/k8s-homelab2210.15.0a day ago
external-secretsjoryirving/home-ops1560.15.0a day ago
external-secretsonedr0p/home-ops22650.15.02 days ago
external-secretsburoa/k8s-gitops2480.15.02 days ago

Values

See the most popular values for this chart:

KeyTypes
serviceMonitor.enabled (9)
true
boolean
serviceMonitor.interval (6)
1m
string
serviceMonitor.metricRelabelings[].action (1)
string
serviceMonitor.metricRelabelings[].regex (1)
string
serviceMonitor.metricRelabelings[].sourceLabels[] (1)
string
certController.image.repository (7)
ghcr.io/external-secrets/external-secrets
string
certController.serviceMonitor.enabled (7)
true
boolean
certController.serviceMonitor.interval (5)
1m
string
certController.resources.limits.memory (1)
string
certController.resources.requests.cpu (1)
string
certController.resources.requests.memory (1)
string
image.repository (7)
ghcr.io/external-secrets/external-secrets
string
installCRDs (7)
true
boolean
leaderElect (7)
true
boolean
webhook.image.repository (7)
ghcr.io/external-secrets/external-secrets
string
webhook.serviceMonitor.enabled (7)
true
boolean
webhook.serviceMonitor.interval (5)
1m
string
webhook.certManager.cert.duration (1)
string
webhook.certManager.cert.issuerRef.group (1)
string
webhook.certManager.cert.issuerRef.kind (1)
string
webhook.certManager.cert.issuerRef.name (1)
string
webhook.certManager.enabled (1)
boolean
webhook.lookaheadInterval (1)
string
webhook.replicaCount (1)
number
webhook.resources.limits.memory (1)
string
webhook.resources.requests.cpu (1)
string
webhook.resources.requests.memory (1)
string
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
webhook.topologySpreadConstraints[].maxSkew (1)
number
webhook.topologySpreadConstraints[].topologyKey (1)
string
webhook.topologySpreadConstraints[].whenUnsatisfiable (1)
string
replicaCount (6)
1
number
bitwarden-sdk-server.enabled (1)
boolean
bitwarden-sdk-server.securityContext.capabilities.drop[] (1)
string
bitwarden-sdk-server.securityContext.fsGroup (1)
number
bitwarden-sdk-server.securityContext.fsGroupChangePolicy (1)
string
bitwarden-sdk-server.securityContext.readOnlyRootFilesystem (1)
boolean
bitwarden-sdk-server.securityContext.runAsGroup (1)
number
bitwarden-sdk-server.securityContext.runAsNonRoot (1)
boolean
bitwarden-sdk-server.securityContext.runAsUser (1)
number
bitwarden-sdk-server.securityContext.seccompProfile.type (1)
string
extendedMetricLabels (1)
boolean
resources.limits.memory (1)
string
resources.requests.cpu (1)
string
resources.requests.memory (1)
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
topologySpreadConstraints[].maxSkew (1)
number
topologySpreadConstraints[].topologyKey (1)
string
topologySpreadConstraints[].whenUnsatisfiable (1)
string