Added sops keys
This commit is contained in:
1
.gitattributes
vendored
1
.gitattributes
vendored
@@ -1,2 +1,3 @@
|
|||||||
_secrets.yaml filter=git-crypt diff=git-crypt
|
_secrets.yaml filter=git-crypt diff=git-crypt
|
||||||
secrets.yaml filter=git-crypt diff=git-crypt
|
secrets.yaml filter=git-crypt diff=git-crypt
|
||||||
|
*.agekey filter=git-crypt diff=git-crypt
|
||||||
|
|||||||
@@ -31,3 +31,4 @@ patches:
|
|||||||
- !patch cilium
|
- !patch cilium
|
||||||
patchesControlPlane:
|
patchesControlPlane:
|
||||||
- !patch allow-control-plane-workloads
|
- !patch allow-control-plane-workloads
|
||||||
|
- !patch sops
|
||||||
|
|||||||
BIN
nodes/testing/_age.agekey
Normal file
BIN
nodes/testing/_age.agekey
Normal file
Binary file not shown.
@@ -6,3 +6,4 @@ cluster:
|
|||||||
name: testing
|
name: testing
|
||||||
controlPlaneIp: 192.168.1.100
|
controlPlaneIp: 192.168.1.100
|
||||||
secretsFile: !realpath _secrets.yaml
|
secretsFile: !realpath _secrets.yaml
|
||||||
|
sopsKeyFile: !realpath _age.agekey
|
||||||
|
|||||||
BIN
nodes/titan/_age.agekey
Normal file
BIN
nodes/titan/_age.agekey
Normal file
Binary file not shown.
@@ -5,3 +5,4 @@ cluster:
|
|||||||
name: titan
|
name: titan
|
||||||
controlPlaneIp: 10.0.2.1
|
controlPlaneIp: 10.0.2.1
|
||||||
secretsFile: !realpath _secrets.yaml
|
secretsFile: !realpath _secrets.yaml
|
||||||
|
sopsKeyFile: !realpath _age.agekey
|
||||||
|
|||||||
17
patches/sops.yaml
Normal file
17
patches/sops.yaml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
cluster:
|
||||||
|
inlineManifests:
|
||||||
|
- name: sops-key
|
||||||
|
contents: |
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: flux-system
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: sops-gpg
|
||||||
|
namespace: flux-system
|
||||||
|
data:
|
||||||
|
age.agekey: |
|
||||||
|
{{ helper.load_secret(node.cluster.sopsKeyFile) }}
|
||||||
Reference in New Issue
Block a user