SOPS: Secrets OPerationS

SOPS: Secrets OPerationS

• https://github.com/mozilla/sops
• brew install sops
• .sops.yaml

• Supported: AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

Examples

• sops --help
• sops --encrypt --in-place your_file
• sops --encrypt --gcp-kms
• sops --decrypt --in-place your_file
• sops --gcp
• sops --azure-kv
• sops --rotate
• sops your-new-file
• sops --pgp
• sops --age

Activities

• https://poweruser.blog/how-to-encrypt-secrets-in-config-files-1dbb794f7352
• Kubernetes secrets
• Kubernetes Operator: sops-secrets-operator
• Improve Temporal OIDC example configuration by using SOPS

Related

• Terraform SOPS, carlpett/sops

See also

• SOPS, sops | sops -d | sops -e | sops exec-env | sops exec-file | sops publish | sops keyservice | sops groups | sops updatekeys | sops --help, kind: SopsSecret
• SOPS: Secrets OPerationS, sops, GCP, ENC[AES256_GCM, sops-secrets-operator