sops
sops copied to clipboard
getsops
Simple and flexible tool for managing secrets
Specifically, bash completion of commands
Add functionality for Oracle Cloud (OCI) and it's KMS. Implements authentication using DEFAULT profile which is read from ~/.oci/config file
I've upgraded sops binary from v3.8.1 to v3.10.2. Without changing any encrypted file, my decrypt attempts started failing due to this one error: ```bash $ SOPS_AGE_KEY_FILE="$HOME/.config/sops/age/my-prod-keys.txt" sops -d my-prod-shared-secrets.yaml Failed...
Currently keys are treated as CSV strings, ex ``` yaml creation_rules: - pgp: >- 85D77543B3D624B63CEA9E6DBC17301B491B3F21, FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4 ``` I've been bitten by two problems recurringly with this format. 1. Comments aren't...
Environment - Platform: Azure - Tool: SOPS - Target: GitOps encrypted secrets - OS: Linux - -SOPS Version: sops 3.9.2 -Azure CLI Version: "azure-cli": "2.72.0", "azure-cli-core": "2.72.0", "azure-cli-telemetry": "1.1.0", "extensions":...
Azure is just really awful and slow to work with, and using sops with a azkv key to edit secrets from e.g. your laptop where you are authenticating with your...
The docs suggest that one can use `keys.openpgp.org` as a keysource https://getsops.io/docs/#specify-a-different-gpg-key-server However, this functionality seems to be removed in https://github.com/getsops/sops/commit/c6236ada5645b6c08e0d87dbb946fcc6d1cfc1a1 > - Support for fetching keys from servers has...
The https://yaml.org/spec/1.2.2/#22-structures says > YAML uses three dashes (“---”) to separate [directives](https://yaml.org/spec/1.2.2/#directives) from [document](https://yaml.org/spec/1.2.2/#documents) [content](https://yaml.org/spec/1.2.2/#nodes). This also serves to signal the start of a document (...) The `sops 3.7.2` (and...
Hello! I am really loving sops, and I've been working on getting it integrated with the 1Password CLI via the SOPS_AGE_KEY_CMD environment variable. However, I (like a lot of people...
There's case when I have custom endpoint for my AWS service, with this changes I could specify STS and KMS endpoint for my AWS service Example usage: ``` creation_rules: -...
