Terraform SOPS provider

• https://registry.terraform.io/providers/carlpett/sops/latest/docs

provider "sops" {}

data "sops_file" "demo-secret" {
  source_file = "demo-secret.enc.json"
}

output "db-password" {
  # Access the password variable that is under db via the terraform map of data
  value = data.sops_file.demo-secret.data["db.password"]
}

See also

• Terraform SOPS, data.sops_file.secrets.data
• SOPS: Secrets OPerationS, sops, GCP, ENC[AES256_GCM, sops-secrets-operator, helm secrets