From ddba03803bef292c678fff407c7985c7fe6b44a0 Mon Sep 17 00:00:00 2001 From: MTRNord Date: Fri, 17 Mar 2023 00:05:35 +0100 Subject: [PATCH] fix sops --- .sops.yaml | 3 +++ clusters/production/infrastructure.yaml | 4 ++++ infrastructure/controllers/kustomization.yaml | 2 +- 3 files changed, 8 insertions(+), 1 deletion(-) create mode 100644 .sops.yaml diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..b6e5d32 --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,3 @@ +creation_rules: + - encrypted_regex: "^(data|stringData)$" + age: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh diff --git a/clusters/production/infrastructure.yaml b/clusters/production/infrastructure.yaml index f521627..2c6f158 100644 --- a/clusters/production/infrastructure.yaml +++ b/clusters/production/infrastructure.yaml @@ -14,3 +14,7 @@ spec: path: ./infrastructure/controllers prune: true wait: true + decryption: + provider: sops + secretRef: + name: sops-age diff --git a/infrastructure/controllers/kustomization.yaml b/infrastructure/controllers/kustomization.yaml index 6c9ea16..57692c8 100644 --- a/infrastructure/controllers/kustomization.yaml +++ b/infrastructure/controllers/kustomization.yaml @@ -1,4 +1,4 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 +apiVersion: kustomize.config.k8s.io/v1beta2 kind: Kustomization resources: - oidc-secret.yaml