User Tools
mozilla_sops
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
mozilla_sops [2026/02/12 09:02] val |
mozilla_sops [2026/02/14 17:18] (current) val |
||
|---|---|---|---|
| Line 22: | Line 22: | ||
| # export VAULT_TOKEN=hKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKU | # export VAULT_TOKEN=hKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKU | ||
| - | ~/openvpn1# sops encrypt --hc-vault-transit $VAULT_ADDR/v1/transit/keys/ansible-openvpn1 openvpn1/files/server.key -i | + | ~/openvpn1# sops encrypt --hc-vault-transit $VAULT_ADDR/v1/transit/keys/ansible-openvpn1 openvpn1/files/server.key --in-place |
| ~/openvpn1# cat openvpn1/files/server.key | ~/openvpn1# cat openvpn1/files/server.key | ||
| Line 28: | Line 28: | ||
| ~/openvpn1# sops decrypt openvpn1/files/server.key -i | ~/openvpn1# sops decrypt openvpn1/files/server.key -i | ||
| - | ~/openvpn1|gowebd-k8s# cat .sops.yaml | + | # cat .sops.yaml |
| </code><code> | </code><code> | ||
| creation_rules: | creation_rules: | ||
| - path_regex: inventory.yaml | - path_regex: inventory.yaml | ||
| - | encrypted_regex: ansible_ssh_user|^ansible.*pass | + | encrypted_regex: ^ansible.*pass |
| hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/ansible-openvpn1" | hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/ansible-openvpn1" | ||
| - path_regex: openvpn1/files/server.key | - path_regex: openvpn1/files/server.key | ||
| hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/ansible-openvpn1" | hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/ansible-openvpn1" | ||
| - | # - path_regex: webd-chart/values.yaml | + | # - path_regex: keycloak-db-secret.yaml |
| - | # encrypted_regex: SECRET | + | # hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/my-pgcluster" |
| - | # hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/webd-k8s" | + | # - path_regex: values.yaml |
| + | # encrypted_regex: adminPassword|password | ||
| + | # hc_vault_transit_uri: "http://server.corpX.un:8200/v1/transit/keys/my-keycloak" | ||
| </code><code> | </code><code> | ||
| ~/openvpn1# sops encrypt inventory.yaml | ~/openvpn1# sops encrypt inventory.yaml | ||
| ~/openvpn1# | ~/openvpn1# | ||
| - | sops encrypt inventory.yaml -i | + | sops -e -i inventory.yaml |
| - | sops encrypt openvpn1/files/server.key -i | + | sops -e -i openvpn1/files/server.key |
| ~/openvpn1# cat inventory.yaml | ~/openvpn1# cat inventory.yaml | ||
| Line 51: | Line 53: | ||
| ~/openvpn1# sops exec-file inventory.yaml 'echo {}; cat {}' | ~/openvpn1# sops exec-file inventory.yaml 'echo {}; cat {}' | ||
| - | </code><code> | ||
| - | kube1:~/gowebd-k8s# sops encrypt webd-chart/values.yaml -i | ||
| - | kube1:~/gowebd-k8s# sops edit webd-chart/values.yaml | + | ~/openvpn1# ###sops -d -i inventory.yaml |
| </code> | </code> | ||
mozilla_sops.1770876144.txt.gz · Last modified: 2026/02/12 09:02 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
