Files
airshipctl/pkg/secret/testdata/secrets/encryption/qualified-encrypted-secret.yaml
uday.ruddarraju 9a608de653 Encrypt and decrypt using sops
Design document: https://docs.google.com/document/d/1EjiCuXoiy8DEEXe15KxVJ4iWrwogCyG113_0LdzcWzQ/edit?usp=drive_web&ouid=102644738301620637153

Demo readme: https://hackmd.io/@WE7PUWXBRVeQJzCZkXkOLw/ryoW-aOLv

This patchset comprises of:
- package library to interact with sops
- integrate airshipctl encrypt/decrypt with sops

Change-Id: I2ca3ff3c8661d146708084728cb3f87365a4f39e
2020-10-23 02:27:45 -07:00

35 lines
1.6 KiB
YAML

apiVersion: v1
kind: Secret
metadata:
name: test-secret
annotations:
airshipit.org/encrypt: "true"
data:
username: ENC[AES256_GCM,data:mGzbHwXK7eg=,iv:HaGzz1M4qvUDc7L/Lzdb//bSBRd/BfC2O1tA6kqCU8c=,tag:QTkCtqN6duiGOnV06ieubQ==,type:str]
password: ENC[AES256_GCM,data:eiQt1Hp7wZCXMupCrMvwsQ==,iv:qo4TtuwJJAj5KV/fFpcvxIGmaX5hWCNPu7i6lo3QnqE=,tag:w/LB8kfRKQrDc5N8eBZhaA==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
lastmodified: '2020-10-02T16:53:07Z'
mac: ENC[AES256_GCM,data:EX5USe77E2GGHs3osFmtHAIJqOFFMONpRg5k8qG92SVStBszCY/X3mnh1Eabc1jViUdxfH2v1Ki0nDozMGyZM/VOLbU4h1HI3z7a3k9SyslaJyTiy7k7HVhbQxadc+djGxnh6AXYyluh3cmfEQ3Eo/PU8w7gnwsnC4IMjpeahcY=,iv:HZGDl8hyAQwx3b2V27vhhHH9W6sNVYwhR0HfA6NcJQI=,tag:6WQ/RnTNGKRgYrYA566+vw==,type:str]
pgp:
- created_at: '2020-10-02T16:53:06Z'
enc: |
-----BEGIN PGP MESSAGE-----
hQEMA0Xswh95z+O7AQf6AwKVezvk53aboUjXfYXaeY9z2BuWtlmZrmJTm/UuTbTC
jS5aWboKyUj3iOzbdOXXtuKhF5SgqfKQcNDz/98p5KU+ZYKPgT883a1/UqH+trpo
ntYpzYC/CCXeIEZypIXgLqDbnaz4tB1+15ZESLBGIxIRSqjX4ofyRpnZaf77vO7y
0C3RFYAlo2sjoQDaH1gotPBdBbCgaOui4v4imYCU/NIhGX+HP2oAhOq7A0LcAGiF
6UpTVuyo5sm2jE8IYXUsizTdj8DPMy50Dl1sR7EhkGmg4nxGresRPBZPAoGBYfk4
am7UYyQDbKbSwjUwgVcwYZtA6HanZ3ABP1SbqwJvVdJeAYNIB9LzsVE2/2mGTJRU
b578RurdBvccttDOg4bIsSIVpFSwK6x9UWxo+dRpgzgw/zWFV3KTit0CBmjVGuq4
/VHwBz6R4acvNl3AqkM88lTemGEDxv17D+DyCuWORg==
=GYMw
-----END PGP MESSAGE-----
fp: 681E3A89EB1DAFD36EB883120A73BB48E26694D8
encrypted_regex: ^data
version: 3.6.0