feat: template the sops configuration file
Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
1 file changed
+4
@@ -1,16 +1,20 @@
|
|||||||
---
|
---
|
||||||
creation_rules:
|
creation_rules:
|
||||||
|
#% if bootstrap_distribution == "talos" %#
|
||||||
- # IMPORTANT: This rule MUST be above the others
|
- # IMPORTANT: This rule MUST be above the others
|
||||||
path_regex: talos/.*\.sops\.ya?ml
|
path_regex: talos/.*\.sops\.ya?ml
|
||||||
key_groups:
|
key_groups:
|
||||||
- age:
|
- age:
|
||||||
- "#{ bootstrap_age_public_key }#"
|
- "#{ bootstrap_age_public_key }#"
|
||||||
|
#% endif %#
|
||||||
- path_regex: kubernetes/.*\.sops\.ya?ml
|
- path_regex: kubernetes/.*\.sops\.ya?ml
|
||||||
encrypted_regex: "^(data|stringData)$"
|
encrypted_regex: "^(data|stringData)$"
|
||||||
key_groups:
|
key_groups:
|
||||||
- age:
|
- age:
|
||||||
- "#{ bootstrap_age_public_key }#"
|
- "#{ bootstrap_age_public_key }#"
|
||||||
|
#% if bootstrap_distribution in ['k0s', 'k3s'] %#
|
||||||
- path_regex: ansible/.*\.sops\.ya?ml
|
- path_regex: ansible/.*\.sops\.ya?ml
|
||||||
key_groups:
|
key_groups:
|
||||||
- age:
|
- age:
|
||||||
- "#{ bootstrap_age_public_key }#"
|
- "#{ bootstrap_age_public_key }#"
|
||||||
|
#% endif %#
|
||||||
Reference in new issue
Block a user