treasuremap/manifests/type/airship-core/shared/encrypt-secrets/encrypt-target.yaml

18 lines
471 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: encrypt-target
annotations:
config.k8s.io/function: |
container:
image: gcr.io/kpt-fn-contrib/sops:v0.3.0
envs:
- VAULT_ADDR
- VAULT_TOKEN
network: true
data:
cmd: encrypt
cmd-json-path-filter: '$[?(@.metadata.name=="combined-target-secrets")]'
cmd-extra-params-json-path-filter: '$[?(@.metadata.name=="target-encryption-keys")]'
encrypted-regex: '^(data)$'