kubeseal-webgui
May 21, 2026 · View on GitHub
kubeseal-webgui is a web frontend for
Bitnami Sealed Secrets. It
lets cluster operators encrypt Kubernetes Secrets in the browser using the
cluster's public certificate, without exposing the kubeseal CLI to every
user. The backend is FastAPI (Python 3.12), the frontend is Vue 3 + Vuetify 4,
and the app ships as two container images plus a Helm chart on the GitHub
Container Registry.
Demo
Prerequisites
- A Kubernetes cluster (1.25 or newer).
- The Bitnami Sealed Secrets controller already installed in the cluster.
- Helm 3.8 or newer.
Quickstart
helm install kubeseal-webgui \
oci://ghcr.io/jaydee94/kubeseal-webgui/charts/kubeseal-webgui \
--namespace kubeseal-webgui \
--create-namespace
See docs/installation.md for ingress, OpenShift route, and certificate options.
Documentation
- Installation — Helm install, ingress, OpenShift route, certificate setup.
- Configuration — full Helm values reference and API environment variables.
- Architecture — how the UI, API, and kubeseal binary fit together; API endpoints; RBAC.
- Development — local setup for the API and UI, running tests, building images, end-to-end testing with KinD.
- Troubleshooting — common errors and how to fix them.
- Helm chart README — chart-specific TL;DR.
- Security policy — supported versions and how to report a vulnerability.
- Release history and upgrade notes — every version is documented as a GitHub Release.
Contributing
Contributions are welcome. See CONTRIBUTING.md for the workflow (Conventional Commits drive the release process) and docs/development.md for local setup.