encrypted secrets data values with sops/age

journal-wiki_secret.enc.yml

@@ -0,0 +1,33 @@
+#############################################
+# - creds for journal-wiki
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: journal-wiki-pass
+data:
+    #ENC[AES256_GCM,data:Z7S+qsAnz116Uvdg5Oq2f++HXJzMcwH4vE2NCA==,iv:BC+JITa0hlgmzRtR2dcH3yCUznH7IPJMkfBtfrGJVPg=,tag:m9dpNPMhUPCprpLShtrCNQ==,type:comment]
+    WIKI_PASSWD: ENC[AES256_GCM,data:2vYiejoDbyhkoaIt5Qe47A==,iv:D3ORKAXfvYuvKe9r9ak3KduCzR9zGEAp4AAJ5OI5CQM=,tag:J6ZlCvLT9F3CGfvfgf0uGw==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaL0E3TXFreVozczVNdGFL
+            ZEpPZE5QQU1BMjlkckV4ZDZVYXpkc2hieGtjCmR6U3o1M3k4KzdRemlqb1dUMVB5
+            dllCQ3VuR0RySWRjSEVjV201OTB6ZVEKLS0tIE5qK0MvSzg5akQ3TkEweWFON1k1
+            Sm53bHViU0YzVlhVQ21DTm9iWkxMZWcKqovaXBatzAFnKAphjrTQ4I0+HAkuK1fJ
+            4P9f7sfvNTnxh7IES08xJI9D6YyWGpc3Qxx8djY55uyVVdJW1+Hs4Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:14:47Z"
+    mac: ENC[AES256_GCM,data:S+sDor1++WxAz1cYQGa/w00Y2r/gZM5MlCYyAEU0bTSPzHJgazLWafIIvjNfHfenbLjUYQcuJrpok1k/wtZtUrIk9GiKOCZabiVThzfxZCJaGJxonUirlYjACKtYpgh3VnqmhJod/wJ43i25unWUxsuQGSwdkytY67/gvuDF+RI=,iv:f3l/HYlQZEGfsHstAPDLajKwDTQyxsoSaY+SK+i6Ogc=,tag:z0e9sKXb/sfZdRrle9gqxg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

journal-wiki_secret.yml.tmpl

@@ -1,16 +0,0 @@
----
-#############################################
-# - creds for journal-wiki
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: journal-wiki-pass
-data:
-  # plaintext pw = "xxxxxxx"
-  WIKI_PASSWD: xxxxxxx
-
-# EOF