kubeseal-webgui

kubeseal-webgui is a web frontend for Bitnami Sealed Secrets. It lets cluster operators encrypt Kubernetes Secrets in the browser using the cluster's public certificate, without exposing the kubeseal CLI to every user. The backend is FastAPI (Python 3.12), the frontend is Vue 3 + Vuetify 4, and the app ships as two container images plus a Helm chart on the GitHub Container Registry.

Demo

Prerequisites

• A Kubernetes cluster (1.25 or newer).
• The Bitnami Sealed Secrets controller

already installed in the cluster.

• Helm 3.8 or newer.

Quickstart

helm install kubeseal-webgui \
  oci://ghcr.io/jaydee94/kubeseal-webgui/charts/kubeseal-webgui \
  --namespace kubeseal-webgui \
  --create-namespace

See docs/installation.md for ingress, OpenShift route, and certificate options.

Documentation

• Installation — Helm install, ingress, OpenShift route,

certificate setup.

• Configuration — full Helm values reference and API

environment variables.

• Architecture — how the UI, API, and kubeseal binary

fit together; API endpoints; RBAC.

• Development — local setup for the API and UI, running

tests, building images, end-to-end testing with KinD.

• Troubleshooting — common errors and how to fix

them.

• Helm chart README — chart-specific TL;DR.
• Security policy — supported versions and how to report a

vulnerability.

• Release history and upgrade notes —

every version is documented as a GitHub Release.

Contributing

Contributions are welcome. See CONTRIBUTING.md for the workflow (Conventional Commits drive the release process) and docs/development.md for local setup.

License

Apache 2.0. See LICENSE and NOTICE.