encrypted secrets data values with sops/age

2021-12-22 11:23:44 -05:00 · 2021-12-22 11:23:44 -05:00 · 37759e66ba
parent cf12598c99
commit 37759e66ba
2 changed files with 33 additions and 16 deletions
--- a/nagios_secret.enc.yml
+++ b/nagios_secret.enc.yml
@ -0,0 +1,33 @@
+#############################################
+# - creds for nagios
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: nagios-pass
+data:
+    #ENC[AES256_GCM,data:o0ctfwczt22+erKgP7TtmBjU2fh6Jv6TBI+rtQ==,iv:3XXPo40U/mytRK3AyXV6KjbV+h1qR19NLCo94RO2o/o=,tag:b2yE8IauAbr30g30XT+95w==,type:comment]
+    NAGIOS_PASSWD: ENC[AES256_GCM,data:0KYiKrDif2/X6+wYMwDulw==,iv:jhCcAwLJKvGav309K2UoFdr/b8pFiTg8eeboVXqNf/8=,tag:D08hdJ/7w+dHv3alhtIQRA==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMQ2d0L3ZUWTM3dGNzaXVC
+            aEx5cDdJRDhodldKRHBqVkNuTzYxQzZXSUFjCmorUXk4ZHFhaHFFYlRNWGIrSlBr
+            VnEvMWdUc1BVODFlWHhpZ3htSkU5aEkKLS0tIE84a0ViRTh5cHU1b0o1Q1RYUDdr
+            eUNuRURGblkyQ2YzR3JNZlZ0Q1NEYzQKRJYI2CD7LJOzlH9C+q4tJaZLSrF1w49M
+            n9NlDUhwpTkoCQf+A4TUaIcjSuDzjvvAczbzUCyWWenR6weezWhR1A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:23:02Z"
+    mac: ENC[AES256_GCM,data:gnp4/rLgFc5dgD/prXm8WpZDrNJQj0K+yk+psOmzjMsrCbDTuSkAPwMhvy5QzbjNMze9qCobswNL60WguE1AIaY4W8b+ksS1TG6ays/EA4wdKf+c3hAT1PqdEL13/UNLBb74I7SeZEkPNYj+iYTxzsh6Y4iw221sGRWdGYRrpNU=,iv:5icAjz9Xv0taSJoInUqG8ktODpeYUwcJanJGZhqI8B8=,tag:Q+sAWcchNGUhpWrc4i2B9A==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/nagios_secret.yml.tmpl
+++ b/nagios_secret.yml.tmpl
@ -1,16 +0,0 @@
---
-#############################################
-# - creds for nagios
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: nagios-pass
-data:
-  # plaintext pw = "xxxxxxx"
-  NAGIOS_PASSWD: xxxxxxx
-
-# EOF