sealed-secrets-to-git What is this provider doing? Get public key from sealed-secret-controller. Encrypt the provided secret manifest. Push to Git. Then the sealed secret is picked up by for example Flux CD. If the public key is changed it will be recreate the sealed secrets.