Skip to content

Commit bf5a60f

Browse files
xunholyxunholy
authored
Add SOPs secret encryption in parallel with git-crypt (#161)
* adding a trial script with a secret that is encrypted Signed-off-by: Michael Fornaro <[email protected]> * adding diffs in cleartext in git Signed-off-by: Michael Fornaro <[email protected]> * test Signed-off-by: Michael Fornaro <[email protected]> * add sops support for secrets Signed-off-by: Michael Fornaro <[email protected]> * change comment Signed-off-by: Michael Fornaro <[email protected]> * move repo.yaml to flux-system to be maintained by the source controller Signed-off-by: Michael Fornaro <[email protected]> * linting fixes Signed-off-by: Michael Fornaro <[email protected]> * remove duplicate file Signed-off-by: Michael Fornaro <[email protected]>
1 parent fe270b1 commit bf5a60f

39 files changed

+423
-3
lines changed

‎.gitattributes

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
1-
.secrets/** filter=git-crypt diff=git-crypt
1+
.secrets/git-crypt/** filter=git-crypt diff=git-crypt
2+
*.enc.yaml diff=sopsdiffer

‎.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,3 +4,4 @@
44
# Ignore directories
55
**/.kube
66
**/.terraform
7+
**/.secrets/sops/unencrypted

‎.secrets/k8s-secret-cloudflare-cert-manager-token.yaml renamed to ‎.secrets/git-crypt/k8s-secret-cloudflare-cert-manager-token.yaml

File renamed without changes.

‎.secrets/k8s-secret-cloudflare-ddns.yaml renamed to ‎.secrets/git-crypt/k8s-secret-cloudflare-ddns.yaml

File renamed without changes.

‎.secrets/k8s-secret-cloudflare-external-dns.yaml renamed to ‎.secrets/git-crypt/k8s-secret-cloudflare-external-dns.yaml

File renamed without changes.

‎.secrets/k8s-secret-dex-helm-values.yaml renamed to ‎.secrets/git-crypt/k8s-secret-dex-helm-values.yaml

File renamed without changes.

‎.secrets/k8s-secret-gcp-thanos.yaml renamed to ‎.secrets/git-crypt/k8s-secret-gcp-thanos.yaml

File renamed without changes.

‎.secrets/k8s-secret-gcp.yaml renamed to ‎.secrets/git-crypt/k8s-secret-gcp.yaml

File renamed without changes.

‎.secrets/k8s-secret-github-oauth2-grafana-generic.yaml renamed to ‎.secrets/git-crypt/k8s-secret-github-oauth2-grafana-generic.yaml

File renamed without changes.

‎.secrets/k8s-secret-github-oauth2-grafana.yaml renamed to ‎.secrets/git-crypt/k8s-secret-github-oauth2-grafana.yaml

File renamed without changes.

0 commit comments

Comments
 (0)