1

# Encrypting Kubernetes Secrets with Age and SOPS on k3s

3

[SOPS](https://github.com/getsops/sops) is a handy utility for encrypting sensitive content within files while making it easy to edit and track them with standard developer tools (git, diff, vi, etc.). Using the [sops-secret-operator](https://github.com/isindir/sops-secrets-operator), you can deploy encrypted Kubernetes secrets as `SopsSecret` custom resources, which are decrypted by the operator and made available as standard `Secret`s for general consumption. This allows secrets to be tracked securely in version control, deployed with standard CI/CD tools, and edited securely by developers. 

5

## Comparison to Alternatives