helm-secrets

helm-secrets is a Helm plugin that enables decryption of encrypted Helm value files during deployment operations. The plugin utilizes sops encryption to secure sensitive configuration data and integrates with cloud-native secret management services including AWS SecretManager, Azure KeyVault, and HashiCorp Vault. The tool allows users to store secrets in external secret managers and inject them into Helm value files or templates at runtime. This approach separates sensitive data from configuration files while maintaining compatibility with existing Helm workflows. helm-secrets supports integration with deployment automation tools such as ArgoCD, enabling encrypted secrets management within GitOps workflows. The plugin processes encrypted value files on-the-fly, decrypting them during Helm operations without storing plaintext secrets in version control systems. The tool operates as a standard Helm plugin and follows Helm's plugin architecture, making it compatible with existing Helm installations and workflows.