OpenPGP
CertifiedTasks that encrypt and decrypt files with OpenPGP, including optional signing and signature verification.
Encrypt accepts a source file (from), recipient list, and ASCII-armored public keys, and can sign the output when given signing keys and a passphrase; Decrypt takes the encrypted file, a private key with optional passphrase, and can validate signatures against allowed users. Both tasks stream files through Kestra storage and return the resulting file URI for downstream processing.
OpenPGP
Tasks that encrypt and decrypt files with OpenPGP, including optional signing and signature verification.
Encrypt accepts a source file (from), recipient list, and ASCII-armored public keys, and can sign the output when given signing keys and a passphrase; Decrypt takes the encrypted file, a private key with optional passphrase, and can validate signatures against allowed users. Both tasks stream files through Kestra storage and return the resulting file URI for downstream processing.
tasks
How to use the Crypto plugin
Encrypt and decrypt files using OpenPGP from Kestra flows.
Tasks
openpgp.Encrypt encrypts a file with one or more recipients' public keys — set recipients (required, list of recipient email addresses) and key (the ASCII-exported public key). To also sign the output, set signPublicKey, signPrivateKey, signPassphrase, and signUser. Set from to the kestra:// URI of the file to encrypt. The output includes uri (the encrypted file).
openpgp.Decrypt decrypts a PGP-encrypted file — set from (the kestra:// URI of the encrypted file), privateKey (ASCII-exported private key), and privateKeyPassphrase (if the key is passphrase-protected). To verify the signature, set signUsersKey (list of public keys) and optionally requiredSignerUsers (list of email addresses that must have signed). The output includes uri (the decrypted file).
Store keys and passphrases in secrets and apply them globally with plugin defaults.
