feat: template the sops configuration file
Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
1 file changed
+4
@@ -1,16 +1,20 @@
|
||||
---
|
||||
creation_rules:
|
||||
#% if bootstrap_distribution == "talos" %#
|
||||
- # IMPORTANT: This rule MUST be above the others
|
||||
path_regex: talos/.*\.sops\.ya?ml
|
||||
key_groups:
|
||||
- age:
|
||||
- "#{ bootstrap_age_public_key }#"
|
||||
#% endif %#
|
||||
- path_regex: kubernetes/.*\.sops\.ya?ml
|
||||
encrypted_regex: "^(data|stringData)$"
|
||||
key_groups:
|
||||
- age:
|
||||
- "#{ bootstrap_age_public_key }#"
|
||||
#% if bootstrap_distribution in ['k0s', 'k3s'] %#
|
||||
- path_regex: ansible/.*\.sops\.ya?ml
|
||||
key_groups:
|
||||
- age:
|
||||
- "#{ bootstrap_age_public_key }#"
|
||||
#% endif %#
|
||||
Reference in new issue
Block a user