Decrypt data from FILE_PATH or pipe. Encryption key should be in $WERF_SECRET_KEY or .werf_secret_key file
Syntax
werf helm secret values decrypt [FILE_PATH] [options]
Examples
# Decrypt secret values file
$ werf helm secret values decrypt .helm/secret-values.yaml
mysql:
user: root
password: root
# Decrypt from a pipe
$ cat .helm/secret-values.yaml | werf helm secret decrypt
mysql:
user: root
password: root
Environments
$WERF_SECRET_KEY Use specified secret key to extract secrets for the deploy. Recommended way to
set secret key in CI-system.
Secret key also can be defined in files:
* ~/.werf/global_secret_key (globally),
* .werf_secret_key (per project)
Options
--dev=false
Enable developer mode (default $WERF_DEV)
--dir=''
Use custom working directory (default $WERF_DIR or current directory)
--home-dir=''
Use specified dir to store werf cache files and dirs (default $WERF_HOME or ~/.werf)
--loose-giterminism=false
Loose werf giterminism mode restrictions (NOTE: not all restrictions can be removed,
more info
https://werf.io/v1.2-alpha/documentation/advanced/configuration/giterminism.html,
default $WERF_LOOSE_GITERMINISM)
--non-strict-giterminism-inspection=false
Change some errors to warnings during giterminism inspection (more info
https://werf.io/v1.2-alpha/documentation/advanced/configuration/giterminism.html,
default $WERF_NON_STRICT_GITERMINISM_INSPECTION)
-o, --output-file-path=''
Write to file instead of stdout
--tmp-dir=''
Use specified dir to store tmp files and dirs (default $WERF_TMP_DIR or system tmp dir)
Options inherited from parent commands
--hooks-status-progress-period=5
Hooks status progress period in seconds. Set 0 to stop showing hooks status progress.
Defaults to $WERF_HOOKS_STATUS_PROGRESS_PERIOD_SECONDS or status progress period value
--kube-config=''
Kubernetes config file path (default $WERF_KUBE_CONFIG or $WERF_KUBECONFIG or
$KUBECONFIG)
--kube-config-base64=''
Kubernetes config data as base64 string (default $WERF_KUBE_CONFIG_BASE64 or
$WERF_KUBECONFIG_BASE64 or $KUBECONFIG_BASE64)
--kube-context=''
Kubernetes config context (default $WERF_KUBE_CONTEXT)
--log-color-mode='auto'
Set log color mode.
Supported on, off and auto (based on the stdout’s file descriptor referring to a
terminal) modes.
Default $WERF_LOG_COLOR_MODE or auto mode.
--log-debug=false
Enable debug (default $WERF_LOG_DEBUG).
--log-pretty=true
Enable emojis, auto line wrapping and log process border (default $WERF_LOG_PRETTY or
true).
--log-quiet=false
Disable explanatory output (default $WERF_LOG_QUIET).
--log-terminal-width=-1
Set log terminal width.
Defaults to:
* $WERF_LOG_TERMINAL_WIDTH
* interactive terminal width or 140
--log-verbose=false
Enable verbose output (default $WERF_LOG_VERBOSE).
-n, --namespace=''
namespace scope for this request
--status-progress-period=5
Status progress period in seconds. Set -1 to stop showing status progress. Defaults to
$WERF_STATUS_PROGRESS_PERIOD_SECONDS or 5 seconds