encrypted secrets data values with sops/age

2021-12-22 11:11:34 -05:00 · 2021-12-22 11:11:34 -05:00 · bfdab40c46
parent dad2d76a65
commit bfdab40c46
2 changed files with 33 additions and 16 deletions
--- a/notes-wiki_secret.enc.yml
+++ b/notes-wiki_secret.enc.yml
@ -0,0 +1,33 @@
+#############################################
+# - creds for notes-wiki
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: notes-wiki-pass
+data:
+    #ENC[AES256_GCM,data:CsTFX/HEJCGtWPDA0ZKtvDdoMFrbWpmFIC89dA==,iv:892dyAE0HnO18eOtMbtEKPyTDsq5HT/bKBgpvwQxBuc=,tag:zy04eZm2ieFhHAMVE/oR9A==,type:comment]
+    WIKI_PASSWD: ENC[AES256_GCM,data:f0cu/eDQ67m23vGEpj2xEw==,iv:KpdaS9c7YwTqhy+YNg1pGTjRqOJOYX6tvdAz6LILpPI=,tag:OZUNl9G6FClDjpqX4VL2EQ==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZGpEelVJbE9MdVFXVWNW
+            T0pyZjF2bUY1dFFtZXBaN05obURpY1Q3TERvCkduQWQzRldLODdyaWFxR0J2cGNU
+            NWV3RkIyVTcwVjlpMXc3bk9BM3VEamMKLS0tIGVUMzBoSTRPajh2dU1sbllteTRR
+            OXpsVUY3bmdNa24vR0w4Z0JkWXltNkkKoeF1abICufczoeTwERAhp2tNsIs9+BUn
+            hy2ZRIsO+WLEoL5qoSlUC0vOP3MhP0y3XOoqwz9kqndl6OuIoOpc1A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:10:02Z"
+    mac: ENC[AES256_GCM,data:4Ysgk8heL1f5y0fRXl8FluRw+JWpSnyokh1qUU3MHrCFnoSaHUyRuIh2JBMyqQe150mFEDZn+tIEjTRaX1m0msrnVBdXW+G2/VJtfUaelzgA+2YDKm5XxWbyCLKw6dMWYID/0shwXZSIEJL4wOyDen60fWlScLMPrty+qiDm1ls=,iv:pg5nzUZIg5M530nBWF+f55EJBRt6hWLSSkSN8d/NpCc=,tag:ACnT67KM1p3uecENVhhixA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/notes-wiki_secret.yml.tmpl
+++ b/notes-wiki_secret.yml.tmpl
@ -1,16 +0,0 @@
---
-#############################################
-# - creds for notes-wiki
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: notes-wiki-pass
-data:
-  # plaintext pw = "xxxxxxx"
-  WIKI_PASSWD: xxxxxxx
-
-# EOF