feat: template the sops configuration file

Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
Devin Buhl committed 2024-01-21 19:00:31 -05:00
1 parent 4dd36a7ca8
commit 49a4c19cc7
1 file changed
+4
+4
View File
@@ -1,16 +1,20 @@
---
creation_rules:
#% if bootstrap_distribution == "talos" %#
- # IMPORTANT: This rule MUST be above the others
path_regex: talos/.*\.sops\.ya?ml
key_groups:
- age:
- "#{ bootstrap_age_public_key }#"
#% endif %#
- path_regex: kubernetes/.*\.sops\.ya?ml
encrypted_regex: "^(data|stringData)$"
key_groups:
- age:
- "#{ bootstrap_age_public_key }#"
#% if bootstrap_distribution in ['k0s', 'k3s'] %#
- path_regex: ansible/.*\.sops\.ya?ml
key_groups:
- age:
- "#{ bootstrap_age_public_key }#"
#% endif %#