How to Install & Set Up External Secrets Operator

Install the External Secrets Operator to sync secrets from Vault, AWS, GCP, and others into native Kubernetes Secrets.

Updated 20262-step setupDownload External Secrets Operator →

Prerequisites

✓A Kubernetes cluster, kubectl, and Helm 3
✓An external secret store (Vault, AWS Secrets Manager, etc.)

Install with Helm

terminal

helm repo add external-secrets https://charts.external-secrets.io
helm repo update
helm install external-secrets external-secrets/external-secrets \
  -n external-secrets --create-namespace

Verify

terminal

kubectl get pods -n external-secrets

Next, create a SecretStore (pointing at your backend) and an ExternalSecret that maps remote keys into a Kubernetes Secret. This Helm install runs inside your cluster, so it's the same regardless of whether the nodes are RHEL-family or Debian-family.

Documentation & Knowledge Base

Official DocumentationExternal Secrets Documentation →Knowledge Base & CommunityExternal Secrets GitHub Discussions →

Download External Secrets Operator— all versions & official links→

Need External Secrets Operator deployed and managed for you?

We're OpenStack Dev — we design, deploy, and operate production DevOps infrastructure.

Get in Touch All Install Guides