encrypted secrets data values with sops/age

2021-12-22 11:24:45 -05:00 · 2021-12-22 11:24:45 -05:00 · bef4033baf
parent ca657c8099
commit bef4033baf
2 changed files with 33 additions and 16 deletions
--- a/wfh-wiki_secret.enc.yml
+++ b/wfh-wiki_secret.enc.yml
@ -0,0 +1,33 @@
+#############################################
+# - creds for wfh-wiki
+# - generate value using;
+#      echo -n '<text>' | base64
+#############################################
+apiVersion: v1
+kind: Secret
+metadata:
+    name: wfh-wiki-pass
+data:
+    #ENC[AES256_GCM,data:mJ6y8n5/5/lP3MUSm8JBCNsaxi6yqJQesFUY4g==,iv:g9Mz7YpkeYEX/CHKRykdndjrUw+R0jumo+xqO3SJ67Y=,tag:1pw3yUIWzg17XFdfA8/0ig==,type:comment]
+    WIKI_PASSWD: ENC[AES256_GCM,data:Ou5ju6ZRyvkl8zbf0IEpbA==,iv:lM88+I10i+yRT4JVyIak5v7OtZmTLePNTVl6eBkYUmM=,tag:v3y/Oke1/pSjNTqZ2txGqg==,type:str]
+# EOF
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x7aazmg26qf5vm7hnvxjqy77yvv5lc7jez7untjfnwrg8pa6aqysxlaa42
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBENnRRbnJacGtPNFR3NlV5
+            V1hPRTNURFhNajBYa09DR0x6L3F1WEtycEE0CjBQajhqZVVmUGRVUnJkbDBGazl5
+            aGFSb3ZjRzdzSlBQbTNqWmU4RVBCZFUKLS0tIEYyWjNlb2tjcFlSK01EYzY2S0l2
+            Q3Nrd2RaWEF0MmtlRklrZm9pY1ppa28KO4dnc5bbpNE4C6IGH9IhLs/BbofUpSMP
+            miTkBaX9SwgwctEhrm39WKy1m3rS3ZsmTf0/0hLMpD2GNe9O9vhKhw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-12-22T16:24:06Z"
+    mac: ENC[AES256_GCM,data:xSF3l+j8Aj+S2OwC0IHp9kMbs1PEo/zkUlqYXYezMASU/pJeMTk5NXNCLR/XZbgGFkB18aPP530fE4JEyd84+lyHNwv+uli2og6Ubc/S7QTRGflt9br2R+GHwcbtWJ1p+gvhfWPKuXf7ntgoAYkWU4bIjxVRL9Rhg1Dl0R1iXps=,iv:SpPmnF5ezcbn1DLXjV5DkoWdLFf9Tr0EE+hFZ6hg9HQ=,tag:NjSe/jZgp5ZFOBwPP2aQOw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/wfh-wiki_secret.yml.tmpl
+++ b/wfh-wiki_secret.yml.tmpl
@ -1,16 +0,0 @@
---
-#############################################
-# - creds for wfh-wiki
-# - generate value using;
-#      echo -n '<text>' | base64
-#############################################
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: wfh-wiki-pass
-data:
-  # plaintext pw = "xxxxxxx"
-  WIKI_PASSWD: xxxxxxx
-
-# EOF