encrypted secrets data values with sops/age

2021-12-22 11:13:36 -05:00 · 2021-12-22 11:13:36 -05:00 · 47d868c2ee
parent 2572924b3c
commit 47d868c2ee
4 changed files with 100 additions and 43 deletions
--- a/lastfm_secret.enc.yml
+++ b/lastfm_secret.enc.yml
@ -0,0 +1,35 @@
+#############################################
+# - creds for lastfm api
+# - generate value using;
+#     echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: lastfm-api
+data:
+    #ENC[AES256_GCM,data:ybDx/8CHsW4qwKJT1JpSx3BUaxwpd0VwZu4k4VO80cpYDYDRcvKSzr4fyOmlmT9mGmVPilWKlQOy/JU=,iv:K27N9o36pW6555nXDv81VqFQDO0FksimVamXn7HrMgA=,tag:q9qLQKnplKIpviA3kD5VGA==,type:comment]
+    LASTFM_APIKEY: ENC[AES256_GCM,data:5cr2gd/BqZM+CBAgw+YkAq+kDEdq28zx3dY2/E/q9245oolr0tV69bmn1JI=,iv:RXFjhDhn5YZN83pv+ektGfsGB+wfHAP3ZoIb8QRuPW8=,tag:i1eJQMPI13p99F9yrIj/Ng==,type:str]
+    #ENC[AES256_GCM,data:/Q47UP7hHDv6oylS70xvZAt+RhPKO4dENuSiRJZs7P5JmoIqUPVFCC44+9DNmhcWC2wfQgJUKODEfvg=,iv:6rJehy5bVejkz2Op4RLBJ0N41NQrJjN3UOrTlLKf0Jc=,tag:PqauyfJS1uG+8S7733jfqA==,type:comment]
+    LASTFM_SECRET: ENC[AES256_GCM,data:I65L7XlyOQvU7zfVXzKm3ayuleCSK9tlqPkqar5IQUBx9YZxnvPWrpMcZ4g=,iv:z8/CwxLYsNTH+Wet852ju3Iv3ds03Dmg7M/pRFqusAI=,tag:fK234gEskB8gfCZ9hzZLww==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dlk3UzdWMVB1a21yUWdH
+            Vm1hQ2J2MGJlSFNERlk1WW5JaG9MNUtJNWhRCnVPejB6anNkL0RqRXoxRnNKQk9Q
+            aTR2K0wwQnNRdmwwSkdVdm9uT25rOWcKLS0tIGZMOWRPYjdHK2ZXaS9tQUtycXpV
+            Uk50Yzg3ZWVEUElSQXA1bkllenRseUEKLkUtgvzVoxUUdgv2FlDg/RlnXLvXVgkh
+            SiSb3jxar0KhfFkpPHrdNI6gUY77g1g2+FpAhsLgAcR2eLTjyRbhNQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:12:11Z"
+    mac: ENC[AES256_GCM,data:0fq2zPV8JsrWAXagqJsGCLuRJhgrtr5iH0z1Lg5DxR0YDY1P8gEs5hfip2/wW4MuiHlSlfv8w99iBp1uuz4oxWelygz6wf204ov8cYdzaJ0DLnErCHSKCqV0jvbEfYAWzurkhr+3xOQeonXfL0JCsZT2Ko1dnVvQGU2VNeMhnmI=,iv:iTGGuj3GEt2WxPoDewbgSMoHO2XOcNT649e194lCbWA=,tag:YMEGA0f7cjB458X/7pfifQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/lastfm_secret.yml.tmpl
+++ b/lastfm_secret.yml.tmpl
@ -1,18 +0,0 @@
---
-#############################################
-# - creds for lastfm api
-# - generate value using;
-#     echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: lastfm-api
-data:
-  # plaintext LastFM.ApiKey = xxxxxxxxx
-  LASTFM_APIKEY: XXXXXXXXXX
-  # plaintext LastFM.Secret = xxxxxxxxx
-  LASTFM_SECRET: XXXXXXXXXX
-
-# EOF
--- a/navidrome_secret.enc.yml
+++ b/navidrome_secret.enc.yml
@ -0,0 +1,65 @@
+#############################################
+# - creds for api integrations for navidrome
+# - generate value using;
+#     echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: lastfm-api
+data:
+    #ENC[AES256_GCM,data:NzNJKkN8roDROqyQgrTWqnxhm6Gu47RZ1r6pzRkdPaGlKoLOB8MBzH42G6g3tuw63q7F1KKxYwd9wmo=,iv:T8V0h+6AZHPgV+xvQc1kQApX6pw+xByonEDvpNSXaMU=,tag:RQNe1TCfubJPqf3WlqcmPQ==,type:comment]
+    LASTFM_APIKEY: ENC[AES256_GCM,data:tgCGGoH/k6qxqW+YpyNjXgRGGJg2fcGE/eYc2sZCLFo55GxgoVhzsOvr3iI=,iv:tUXwR7pKl6TK+WZCQNv8MA1RUKNM2inGMi591fnio/o=,tag:cS2kiYNba29DsX34EedrSw==,type:str]
+    #ENC[AES256_GCM,data:+zcqByHc8FNYORCKBZaSa8O+BEIeDab7JMliLS/unjcGHBDBxWwu8hJPdzZCah1TqGS2UP2GsJEq44E=,iv:EM3IZfu4UmW/lZrZaIWZD1fe0oMRfcK9+HXtu2kNQB0=,tag:EGN6j3rboAEk+K8l1LTErg==,type:comment]
+    LASTFM_SECRET: ENC[AES256_GCM,data:iMoFvdgyP2eT3RE+DO2vDf12RVI9xgogzIyl2byuTDcMySeF+mv/kYNQIPI=,iv:ojR/HjEQZYKVMMZRgkcMJlNZaUw6IxOoAAxggRAqqVo=,tag:OWHkL/rIZsD/PEp35O6+sA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreFZNTDVaVzRGYksyZWgw
+            eTZtMXpOWGtzNS9zM1hLUGl1b3RwanU1WVgwCjFEMHo5L0VNbElNV2pVOE9JQUxL
+            a25UY3VRZGpZSUhNVlFKOHVYRHpndG8KLS0tIFRpWXFkY1Q5Tk8rT211dG5ta2xx
+            dlVYWXhBYm5Ydi9PRm56VG1NVlpQdTAKIDMRS69Qo2wqZg8rLv3X6UWFf6w68zJF
+            i0ONZMwyLAAWS+kFVxZsKWiVXBqH2LfuOAwnpKBH7Rusa5j3Gs3igA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:12:25Z"
+    mac: ENC[AES256_GCM,data:1L9/zY57YrUN+FXj9T45sgxJ4dULDPcJK9lddPlr2TsUrjqOelElXjhzGGpUKSrF1FmqpRdpCOX/JoNJd7VgebufwZohXHvGeF8x1q3xu3PxvkQO/ybhuQnzsp7wOEDL068xxDZFIukXg/y+VwgTJzaG5xFU6X6HuYdA9OyADfs=,iv:+xSZsuyFDxliOkQ7M3/89zYiU0ZNK2ap4Avija6qvxQ=,tag:UUTc8Us/JW1zbVTHDPlRpg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: spotify-api
+data:
+    #ENC[AES256_GCM,data:45OKJstOo4Xhzb9d8y/lZpkml63HEYTNuUiEPh7Eqgg+o3Sxt7xr772WCEy+L32kG0EnVIZJJVE=,iv:ipQhfaLXfzc5vgJELpXd/SA1CgkUuX9vcBcr7vGkCPw=,tag:T9J9vH1Heqg9RPh6QGlh8Q==,type:comment]
+    SPOTIFY_ID: ENC[AES256_GCM,data:uYJg2fl23bUEuswyqjzH2/+VtmDHar5F7h38iPtlCf/VqHryldddvF1NIJA=,iv:DozJhE+7WuNP+CPQWnlMEx2rKn+VsC8iUAey2DTWF6k=,tag:ak8YSyboP3ftr7v/yICvgg==,type:str]
+    #ENC[AES256_GCM,data:reUstMdSioiucYC/ZmCX5wzH5AlUn/LNzekcUwP3IJC8LLj+qxM9Oqk/0AKNU5XwQ/HUeu6F9PBo15l0,iv:2sWsJSNx0QARpi/QqM0jjU2LiXsFu4Y4voCT5H2QMJM=,tag:WKRRuCTWiWydikRgD0s87A==,type:comment]
+    SPOTIFY_SECRET: ENC[AES256_GCM,data:jVg+sHkmp8l4XdYbRQ9yVUVtRaw2ltusvI4YOcxfUw4rAjf2H2VS+Q+wdss=,iv:DAlhS9GYka8Dt+eJ1zPp3Lh0IQAIs/WBerGOnK8cOpA=,tag:gB0InX0aVXPebi2wxwfgQA==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAreFZNTDVaVzRGYksyZWgw
+            eTZtMXpOWGtzNS9zM1hLUGl1b3RwanU1WVgwCjFEMHo5L0VNbElNV2pVOE9JQUxL
+            a25UY3VRZGpZSUhNVlFKOHVYRHpndG8KLS0tIFRpWXFkY1Q5Tk8rT211dG5ta2xx
+            dlVYWXhBYm5Ydi9PRm56VG1NVlpQdTAKIDMRS69Qo2wqZg8rLv3X6UWFf6w68zJF
+            i0ONZMwyLAAWS+kFVxZsKWiVXBqH2LfuOAwnpKBH7Rusa5j3Gs3igA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:12:25Z"
+    mac: ENC[AES256_GCM,data:1L9/zY57YrUN+FXj9T45sgxJ4dULDPcJK9lddPlr2TsUrjqOelElXjhzGGpUKSrF1FmqpRdpCOX/JoNJd7VgebufwZohXHvGeF8x1q3xu3PxvkQO/ybhuQnzsp7wOEDL068xxDZFIukXg/y+VwgTJzaG5xFU6X6HuYdA9OyADfs=,iv:+xSZsuyFDxliOkQ7M3/89zYiU0ZNK2ap4Avija6qvxQ=,tag:UUTc8Us/JW1zbVTHDPlRpg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/navidrome_secret.yml.tmpl
+++ b/navidrome_secret.yml.tmpl
@ -1,25 +0,0 @@
-#############################################
-# - creds for api integrations for navidrome
-# - generate value using;
-#     echo -n '<text>' | base64
-#############################################
-
---
-apiVersion: v1
-kind: Secret
-metadata:
-  name: lastfm-api
-data:
-  LASTFM_APIKEY: xxxxxxx
-  LASTFM_SECRET: xxxxxxx
-
---
-apiVersion: v1
-kind: Secret
-metadata:
-  name: spotify-api
-data:
-  SPOTIFY_ID: xxxxxxx
-  SPOTIFY_SECRET: xxxxxxx
-
-# EOF