Added sops keys
This commit is contained in:
1
.gitattributes
vendored
1
.gitattributes
vendored
@@ -1,2 +1,3 @@
|
||||
_secrets.yaml filter=git-crypt diff=git-crypt
|
||||
secrets.yaml filter=git-crypt diff=git-crypt
|
||||
*.agekey filter=git-crypt diff=git-crypt
|
||||
|
||||
@@ -31,3 +31,4 @@ patches:
|
||||
- !patch cilium
|
||||
patchesControlPlane:
|
||||
- !patch allow-control-plane-workloads
|
||||
- !patch sops
|
||||
|
||||
BIN
nodes/testing/_age.agekey
Normal file
BIN
nodes/testing/_age.agekey
Normal file
Binary file not shown.
@@ -6,3 +6,4 @@ cluster:
|
||||
name: testing
|
||||
controlPlaneIp: 192.168.1.100
|
||||
secretsFile: !realpath _secrets.yaml
|
||||
sopsKeyFile: !realpath _age.agekey
|
||||
|
||||
BIN
nodes/titan/_age.agekey
Normal file
BIN
nodes/titan/_age.agekey
Normal file
Binary file not shown.
@@ -5,3 +5,4 @@ cluster:
|
||||
name: titan
|
||||
controlPlaneIp: 10.0.2.1
|
||||
secretsFile: !realpath _secrets.yaml
|
||||
sopsKeyFile: !realpath _age.agekey
|
||||
|
||||
17
patches/sops.yaml
Normal file
17
patches/sops.yaml
Normal file
@@ -0,0 +1,17 @@
|
||||
cluster:
|
||||
inlineManifests:
|
||||
- name: sops-key
|
||||
contents: |
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: flux-system
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: sops-gpg
|
||||
namespace: flux-system
|
||||
data:
|
||||
age.agekey: |
|
||||
{{ helper.load_secret(node.cluster.sopsKeyFile) }}
|
||||
Reference in New Issue
Block a user