encrypted secrets data values with sops/age

flexget_secret.enc.yml

@@ -0,0 +1,33 @@
+#############################################
+# - creds for flexget webui
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: flexget-pass
+data:
+    #ENC[AES256_GCM,data:GJcMVS+qTLEAigJtokhR2W20CG7lDOjn5I/z9SIGhHc=,iv:uY6hBeEpQesx+s6ZLzjUo3YipJRGcWHq3XkuhjMpEFw=,tag:p6Lt6r5lM0mglk06zPvNJw==,type:comment]
+    FG_WEBUI_PASSWD: ENC[AES256_GCM,data:gKczR2iWgSKoXaVG4fVESlNyL4o=,iv:M+6c+QOxy9VZ7QiDhXmuw7GQXe/fQI/eEg8eY2R5km4=,tag:wZyu0VBStgTnMq3rgyTJhw==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNGFRZ0Rqek5JV01CaU94
+            Z252S0tadnVobUpvWW1BNFFrc1lRT1p1L1JvCmN4UGF3dlBGUXZMT0c0OElKU0N1
+            eENOZlpUTmhscGZvR3hPR0NZTXZJVmsKLS0tIEZXM3N4MGJEMDEwK2lLRE82cFYr
+            bGRaU1VFMG1VZ3ZWdFFic0hBWEg3Y28KVV9svs4zJlVdfbewvcvFZklW4Nsh8oz8
+            f/xQxrNmQ/brisobK+3U/9cfVpFhyBHJt86KBLBlgLdL0EVgBMnEyA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:13:54Z"
+    mac: ENC[AES256_GCM,data:vacP08lVy9wh9qU/An7b4v9eiXCz1tTndejvmjuacbXH7Cg5rIc31XILYY8rsosKVE+Nk+2Un08iQQORz+LoPq54ef9MtimlATQmI199o37LOmSWaZixia6uce+wl1Vx2AwPjLhfR5SwRyDV1g3JEw9r3xPUHDnTs7QZLMibKmM=,iv:3PibqVerjhm0OlAc1nzqVeARLqh7k9Myw9eZoYmRk9k=,tag:eD8rDyXHxV3VPuU+aoK+Nw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

flexget_secret.yml.tmpl

@@ -1,16 +0,0 @@
----
-#############################################
-# - creds for flexget webui
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: flexget-pass
-  namespace: k8stv
-data:
-  FG_WEBUI_PASSWD: xxxxxxxxxx
-
-# EOF