airshipctl/kustomization.yaml at 1b74bd49f44b4710d2452fe3aa87544a05e408e9 - airshipctl - OpenDev: Free Software Needs Free Tools

airship/airshipctl

Alexey Odinokov a7e332f9ec SOPS improvements

Added 2 phases:
1. secret-reencrypt - This phase can be used to
reecnrypt the existing secrets with new key.
To do so SOPS_IMPORT_PGP must contain
old public key and new private key (but
may also include other data).
SOPS_PGP_FP must contain fingerprint of
new private key.

2. secret-show - This phase may be useful for some users
that need to see what generated by secret-generate phase.

Disabled SOPS debug by default.
To enable it back run commands with
env variable DEBUG_SOPS_GPG=true

Change-Id: Id7fe13d6943d386577df25dba4aaa83e62e58980

2021-03-19 21:31:25 +00:00

7 lines

98 B

YAML

Raw Blame History

 resources:
   - generated/secrets.yaml
 transformers:
   - decrypt-secrets
   - ../overrideplacement