From f5798dae4ce4ec276f5086dcb6ce4b7b3e686cfd Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Mon, 1 Dec 2025 01:59:39 +0100
Subject: [PATCH] Added sops keys

---
 .gitattributes               |   1 +
 nodes/_defaults.yaml         |   1 +
 nodes/testing/_age.agekey    | Bin 0 -> 211 bytes
 nodes/testing/_defaults.yaml |   1 +
 nodes/titan/_age.agekey      | Bin 0 -> 211 bytes
 nodes/titan/_defaults.yaml   |   1 +
 patches/sops.yaml            |  17 +++++++++++++++++
 7 files changed, 21 insertions(+)
 create mode 100644 nodes/testing/_age.agekey
 create mode 100644 nodes/titan/_age.agekey
 create mode 100644 patches/sops.yaml

diff --git a/.gitattributes b/.gitattributes
index cd0b993..9fc5447 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,3 @@
 _secrets.yaml filter=git-crypt diff=git-crypt
 secrets.yaml filter=git-crypt diff=git-crypt
+*.agekey filter=git-crypt diff=git-crypt
diff --git a/nodes/_defaults.yaml b/nodes/_defaults.yaml
index 1f70843..4b17c1b 100644
--- a/nodes/_defaults.yaml
+++ b/nodes/_defaults.yaml
@@ -31,3 +31,4 @@ patches:
   - !patch cilium
 patchesControlPlane:
   - !patch allow-control-plane-workloads
+  - !patch sops
diff --git a/nodes/testing/_age.agekey b/nodes/testing/_age.agekey
new file mode 100644
index 0000000000000000000000000000000000000000..791ab4433c24a26d5ecf6c857d21c61207e70c5f
GIT binary patch
literal 211
zcmV;^04)CiM@dveQdv+`01>|UpbXD!{`4P1xlIcwg#H6K{?TQ9=&Irr{cdzJqq2in
zhd@4<a}7OZC2rB0O7D+LgdMuYz|khU_hFuEfuCQId;g^COhjs7qY^IFrYpu4U~w0Y
zVSQnd85vV?11WM^ix1X*+k>DyB9EDKFg~mkjd=H8YDi5dBWT-)mSu_m|I>jc#37<r
zCg@}K{C4z^dGD30^bEUN#Hvzt*Y3QLDn$~@O;gAy%WiKxXIgxVF?C-5@hcDxP;RJ6
Nmps+kpZ#O=;a3YpW|05@

literal 0
HcmV?d00001

diff --git a/nodes/testing/_defaults.yaml b/nodes/testing/_defaults.yaml
index 1f0088a..080b997 100644
--- a/nodes/testing/_defaults.yaml
+++ b/nodes/testing/_defaults.yaml
@@ -6,3 +6,4 @@ cluster:
   name: testing
   controlPlaneIp: 192.168.1.100
   secretsFile: !realpath _secrets.yaml
+  sopsKeyFile: !realpath _age.agekey
diff --git a/nodes/titan/_age.agekey b/nodes/titan/_age.agekey
new file mode 100644
index 0000000000000000000000000000000000000000..ee154d023d1deee7c47f34fece362590cd5c7263
GIT binary patch
literal 211
zcmV;^04)CiM@dveQdv+`0CF-q)+mD}(C3>kG3|gw1WOZE_JS%?lp>&F8RHC<M)c)M
zHjNeusTX%E%8$fWt<o=;T1vdfz6U{F#MRM-KzE<z2F9mjy}q~NX=Dt$k&&W%Y((1h
zHj9IU2G>C39&Ml(iLYO{vEV$#=S_UASt}_ih4f<3Ff0eCDNc^0WC|QMkPiInsIY;z
z27wuQ!POsL6foj!?;#JWBAm2p0)9t%^EEzqvkxuW!=APZiiy}1<0POK?Y_<F8((mh
N;iKk?RU{j^l0#3<Vk7_n

literal 0
HcmV?d00001

diff --git a/nodes/titan/_defaults.yaml b/nodes/titan/_defaults.yaml
index efa57c0..816b841 100644
--- a/nodes/titan/_defaults.yaml
+++ b/nodes/titan/_defaults.yaml
@@ -5,3 +5,4 @@ cluster:
   name: titan
   controlPlaneIp: 10.0.2.1
   secretsFile: !realpath _secrets.yaml
+  sopsKeyFile: !realpath _age.agekey
diff --git a/patches/sops.yaml b/patches/sops.yaml
new file mode 100644
index 0000000..b81cda3
--- /dev/null
+++ b/patches/sops.yaml
@@ -0,0 +1,17 @@
+cluster:
+  inlineManifests:
+    - name: sops-key
+      contents: |
+        apiVersion: v1
+        kind: Namespace
+        metadata:
+          name: flux-system
+        ---
+        apiVersion: v1
+        kind: Secret
+        metadata:
+          name: sops-gpg
+          namespace: flux-system
+        data:
+          age.agekey: |
+            {{ helper.load_secret(node.cluster.sopsKeyFile) }}