encrypted secrets data values with sops/age

2021-12-22 11:07:11 -05:00 · 2021-12-22 11:07:11 -05:00 · d950b23c78
parent 8238a4666d
commit d950b23c78
2 changed files with 33 additions and 16 deletions
--- a/website-wiki_secret.enc.yml
+++ b/website-wiki_secret.enc.yml
@ -0,0 +1,33 @@
+#############################################
+# - creds for website-wiki
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: website-wiki-pass
+data:
+    #ENC[AES256_GCM,data:xte8JJu8kkYII7WloZFucPkuxUj0bZX0eK42bA==,iv:lOmqwmTr4vX+oA0awSJDi+z4HYY+01JHtC/tfL0P4mw=,tag:nMYh6s+sIUcZwkIfpqCong==,type:comment]
+    WIKI_PASSWD: ENC[AES256_GCM,data:kO9D0PFsYLslmXCr831npQ==,iv:kqQ+vkiOKWDywPjf8iOm8KnSueZOqEiuuBIMBWch2Nc=,tag:r9DFOL2upKxOlb4Rj93Ftg==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCVEhVUzFlbFZvVzl4RkpG
+            SFY2YTl6QWt1WHBaMkNlN1hGM2ZXcDcyTFdvCjh1c0pFWG96TEtlZkp2b3NJUzBL
+            cnVJK3pubkhKSzFHeDFZL0ZaU2RyUzQKLS0tIHBIcGR5d1JCc0doRzlmK1VUQnpy
+            NTdZMUM3RGt4MUVvU0xvWThNMklpdVUKJ1IIonA0Up6gQzAGB0IZFZPC6WmjCdfH
+            f3K7aUcfdZe+o6+jmpMmjUsf50EC1eH0JqRSMOMKlJZJlWoxLsFs0w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:06:26Z"
+    mac: ENC[AES256_GCM,data:ifyQZu23PwDxjHZirWIbV2H0cSF+xVJBFGgn9khjtQ9DrW5npCNJYi/wr7DSifQH3Nsi8mEYWU2RiCWWpPnutNce2gQ4dTObOAtlssmnoZ/tNRvwm6zgPSmYML3qSp4IbNQmxl5I9Y4Y0GmIG/A97Wzb4K9YlL+yX1vZf9pYsC4=,iv:fUSrOCw+2hcCkuZnzJGfhXljEj5ffa4iIa6AK536xmk=,tag:NgkRQeOyNHiiFhx42EcS2w==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/website-wiki_secret.yml.tmpl
+++ b/website-wiki_secret.yml.tmpl
@ -1,16 +0,0 @@
---
-#############################################
-# - creds for website-wiki
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: website-wiki-pass
-data:
-  # plaintext pw = "xxxxxxx"
-  WIKI_PASSWD: xxxxxxx
-
-# EOF