Files
home-cluster/tmpl/.sops.yaml
T

12 lines
299 B
YAML

---
creation_rules:
- path_regex: provision/.*\.sops\.ya?ml
unencrypted_regex: "^(kind)$"
pgp: >-
${BOOTSTRAP_PERSONAL_KEY_FP}
- path_regex: cluster/.*\.ya?ml
encrypted_regex: "^(data|stringData)$"
pgp: >-
${BOOTSTRAP_FLUX_KEY_FP},
${BOOTSTRAP_PERSONAL_KEY_FP}