privilegedescalation/headlamp-sealed-secrets-plugin

Files

T

Chris Farhood dddbd30677 Initial release: Headlamp Sealed Secrets plugin v0.1.0

Features:
- Complete SealedSecret CRD integration with Headlamp
- Client-side encryption using controller's public key
- Support for all three scoping modes (strict, namespace-wide, cluster-wide)
- List and detail views for SealedSecrets
- Encryption dialog for creating new SealedSecrets
- Decryption support with RBAC awareness
- Sealing keys management
- Settings page for controller configuration
- Integration with Secret detail view

Technical:
- Full TypeScript with strict mode
- ~1,345 lines of code
- Build size: 339.42 kB (93.21 kB gzipped)
- Compatible with Headlamp v0.13.0+
- Apache 2.0 license

Security:
- All encryption performed client-side
- RSA-OAEP + AES-256-GCM (kubeseal-compatible)
- Auto-hide decrypted values after 30 seconds

Closes: Initial implementation

2026-02-11 20:31:20 -05:00

1.5 KiB

Raw Blame History

Changelog

All notable changes to the Headlamp Sealed Secrets Plugin will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

0.1.0 - 2026-02-11

Added

Initial release of Headlamp Sealed Secrets plugin
SealedSecret CRD integration with list and detail views
Client-side encryption using controller's public key
Support for all three scoping modes (strict, namespace-wide, cluster-wide)
Encryption dialog for creating new SealedSecrets
Decryption dialog for viewing secret values (RBAC-aware)
Sealing keys management view
Settings page for controller configuration
Integration with Headlamp's Secret detail view
Comprehensive documentation and README
Apache 2.0 license
Artifact Hub metadata for publishing

Security

All encryption performed client-side in browser
Plaintext values never transmitted over network
RSA-OAEP + AES-256-GCM encryption (compatible with kubeseal)
Auto-hide decrypted values after 30 seconds
Password-masked inputs with show/hide toggle

Technical

Full TypeScript with strict mode
~1,345 lines of code
Build size: 339.42 kB (93.21 kB gzipped)
Dependencies: node-forge for cryptography
Compatible with Headlamp v0.13.0+

1.5 KiB Raw Blame History