Difference between revisions of "Sops --encrypt --gcp-kms"
Jump to navigation
Jump to search
Line 3: | Line 3: | ||
You can define your key using <code>--gcp-kms</code> option or by defining a <code>[[SOPS_GCP_KMS]]</code> [[environment variable]] | You can define your key using <code>--gcp-kms</code> option or by defining a <code>[[SOPS_GCP_KMS]]</code> [[environment variable]] | ||
+ | |||
+ | Exporting your key: | ||
+ | * <code>export [[SOPS_GCP_KMS]]="projects/your-project/locations/global/keyRings/your-keyring/cryptoKeys/your-sops-encryption-key"</code> | ||
== Examples == | == Examples == | ||
Line 9: | Line 12: | ||
+ | == Errors == | ||
sops --encrypt --gcp-kms only-one-file | sops --encrypt --gcp-kms only-one-file | ||
[[Error: no file specified]] | [[Error: no file specified]] | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
== Related == | == Related == |
Revision as of 07:02, 24 November 2022
sops --encrypt --gcp-kms
You can define your key using --gcp-kms
option or by defining a SOPS_GCP_KMS
environment variable
Exporting your key:
export SOPS_GCP_KMS="projects/your-project/locations/global/keyRings/your-keyring/cryptoKeys/your-sops-encryption-key"
Contents
Examples
sops --encrypt --gcp-kms $KMS_PATH secret.yaml > secret.enc.yaml sops --encrypt --gcp-kms $KMS_PATH --in-place secret.yam
Errors
sops --encrypt --gcp-kms only-one-file Error: no file specified
Related
sops --decrypt --gcp-kms
gcloud kms keys list --location global --keyring sops
SOPS_GCP_KMS
environment variable- KMS
See also
- SOPS,
sops | sops -d | sops -e | sops exec-env | sops exec-file | sops publish | sops keyservice | sops groups | sops updatekeys | sops --help
- SOPS: Secrets OPerationS,
sops
, GCP,ENC[AES256_GCM, sops-secrets-operator
Advertising: