diff --git a/.sops.yaml b/.sops.yaml
new file mode 100755
index 0000000..ad380a3
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,69 @@
+# Fingerprint | User Type | User ID
+# 533A89DD49FBCDA2BF014A936C962DD77704154A | autom | build-infra <NSO-Team-DevOps@netgo.de>
+# EFBBBB131CF1D863005C18868C8C09CA950B1DFF | autom | smardigo automation DEMOMPMX (smardigo automation DEMOMPMX) <NSO-Team-DevOps@netgo.de>
+# A7A1D860AA45B6B5B29BC192C55BD9B4CD8DE439 | autom | smardigo automation DEV (smardigo automation DEV) <NSO-Team-DevOps@netgo.de>
+# C674EFA56D3EDFDA404B1684090D46D8F1D0C0F8 | autom | devnso adp (devnso-adp gpg key) <NSO-Team-DevOps@netgo.de>
+# 0E8955A79FF4687A3ACF78E50B5E444C75867E58 | autom | smardigo automation DEVNSO (smardigo automation DEVNSO) <NSO-Team-DevOps@netgo.de>
+# 98235A419EA3586BFF4E3FC692D4A5202A0D9519 | autom | poc-workload01 (poc-workload01 gpg key for sops) <NSO-Team-DevOps@netgo.de>
+# E5B4FE1E0209DFFE320D2A2E47087747D89B72EC | autom | smardigo automation PRODNSO (smardigo automation PRODNSO) <NSO-Team-DevOps@netgo.de>
+# 890B2EB48F343D4C6DB9DA0916826F30002D3C1D | autom | smardigo automation QA (smardigo automation QA) <NSO-Team-DevOps@netgo.de>
+# 4069413B74A3AB13E10DF5FD3EA8F0D0FB1CAF36 | autom | smardigo automation QANSO (smardigo automation QANSO) <NSO-Team-DevOps@netgo.de>
+# 42AA7F6BF795490C1A522C730ED842BE1216E0C1 | autom | rancher-poc <NSO-Team-DevOps@netgo.de>
+# B4BAA59056DC362809388F3F2119881095EA7DED | autom | sot production (sot production gpg key) <NSO-Team-DevOps@netgo.de>
+# DF977A1F65999F4CDD721A27516F64D5932B8AD9 | autom | sot integration (sot integration) <NSO-Team-DevOps@netgo.de>
+# 5623CCAD4242CC3E0225A62986AF09C173781578 | autom | smardigo automation SSPDEV <NSO-Team-DevOps@netgo.de>
+# 1EBAE111F6EAE0CF136358E8625C5A3B8DA21485 | human | Annika Biermann <annika.biermann@netgo.de>
+# 17B8FDF68AC123EB666934B17D0DF6EC048A5D77 | human | Claus Paetow (Firmenadresse) <claus.paetow@netgo.de>
+# 03ADBCD31737EB474A4BD235CE615FAF927A2054 | human | Esther Fuhrmann (GPG Key for SOPS) <esther.fuhrmann@netgo.de>
+# 04ECA5DBF73E98EBCC1FF0B018F2D15CC56BE487 | human | Hans-Peter Wissenbach <ext.hans-peter.wissenbach@netgo.de>
+# 9E561083EACDE14694C73A323A2F6C1D153D753F | human | Frederik Marticke <frederik.marticke@netgo.de>
+# 9F08DA9D42379AFE6610E9E615CCEC6801DBA02E | human | Hoan To (Hoan To GPG Key) <hoan.to@netgo.de>
+# BA6328948D50175F196AAB5111F324603D12DD56 | human | Jan Jantzen <jan.jantzen@netgo.de>
+# B643A5D780A01F24E95AA100DE6F8E2C149C3748 | human | johannes.wicovsky <johannes.wicovsky@netgo.de>
+# 8CCCFCC0B5AD3F382B51BA32F4DEF49628030ED9 | human | Joshua Kapfer <joshua.kapfer@netgo.de>
+# C19A7D807525CE24443CA9A49372E896B41FE700 | human | Kevin Bauske <kevin.bauske@netgo.de>
+# 0DB51A7E90AC6418B7DB83724D38970874850C33 | human | Kleanthis Damianidis <kleanthis.damianidis@netgo.de>
+# BF3D5CEA36DB58AAE1063D0BB341078652D87924 | human | Lee Watson (dies ist mein schluessel, es gibt viele ähnliche, aber diese ist meins) <lee.watson@netgo.de>
+# 1FBAEBCDF9336AD5E7CAD9369158CA503C2CEA15 | human | Matthias Friedrich <ext.matthias.friedrich@netgo.de>
+# 73C2C9954D1BC94DC6682525D2FA233B52AEC75C | human | Michael Haehnel (NSO DevOps) <michael.haehnel@netgo.de>
+# 13E169CF5C35EF164628764AAA2EECBDE0B38CF7 | human | Philipp Eichhorn <philipp.eichhorn@netgo.de>
+# 13D7771BDE5241293F3EDA442AB3335ECC93DDDC | human | Sebastian Schröder <sebastian.schroeder@netgo.de>
+# BE3FB94982C2DE95B1EDD388A96613A6B1DB15B5 | human | Sven Ketelsen <sven.ketelsen@netgo.de>
+# 0C136F7514100470AD3EC8D37BF1FAEDB2ACCA9A | human | Thomas Steube <thomas.steube@netgo.de>
+# 57F93F2A6585CF2DF9A3B31F13B9F45E122698D5 | human | Tobias Stroehl <tobias.stroehl@netgo.de>
+# keys in https://git.dev-at.de/smardigo-hetzner/communication-keys
+creation_rules:
+  # list of keys for encryption in stage
+  - pgp: >-
+      533A89DD49FBCDA2BF014A936C962DD77704154A,
+      EFBBBB131CF1D863005C18868C8C09CA950B1DFF,
+      A7A1D860AA45B6B5B29BC192C55BD9B4CD8DE439,
+      C674EFA56D3EDFDA404B1684090D46D8F1D0C0F8,
+      0E8955A79FF4687A3ACF78E50B5E444C75867E58,
+      98235A419EA3586BFF4E3FC692D4A5202A0D9519,
+      E5B4FE1E0209DFFE320D2A2E47087747D89B72EC,
+      890B2EB48F343D4C6DB9DA0916826F30002D3C1D,
+      4069413B74A3AB13E10DF5FD3EA8F0D0FB1CAF36,
+      42AA7F6BF795490C1A522C730ED842BE1216E0C1,
+      B4BAA59056DC362809388F3F2119881095EA7DED,
+      DF977A1F65999F4CDD721A27516F64D5932B8AD9,
+      5623CCAD4242CC3E0225A62986AF09C173781578,
+      1EBAE111F6EAE0CF136358E8625C5A3B8DA21485,
+      17B8FDF68AC123EB666934B17D0DF6EC048A5D77,
+      03ADBCD31737EB474A4BD235CE615FAF927A2054,
+      04ECA5DBF73E98EBCC1FF0B018F2D15CC56BE487,
+      9E561083EACDE14694C73A323A2F6C1D153D753F,
+      9F08DA9D42379AFE6610E9E615CCEC6801DBA02E,
+      BA6328948D50175F196AAB5111F324603D12DD56,
+      B643A5D780A01F24E95AA100DE6F8E2C149C3748,
+      8CCCFCC0B5AD3F382B51BA32F4DEF49628030ED9,
+      C19A7D807525CE24443CA9A49372E896B41FE700,
+      0DB51A7E90AC6418B7DB83724D38970874850C33,
+      BF3D5CEA36DB58AAE1063D0BB341078652D87924,
+      1FBAEBCDF9336AD5E7CAD9369158CA503C2CEA15,
+      73C2C9954D1BC94DC6682525D2FA233B52AEC75C,
+      13E169CF5C35EF164628764AAA2EECBDE0B38CF7,
+      13D7771BDE5241293F3EDA442AB3335ECC93DDDC,
+      BE3FB94982C2DE95B1EDD388A96613A6B1DB15B5,
+      0C136F7514100470AD3EC8D37BF1FAEDB2ACCA9A,
+      57F93F2A6585CF2DF9A3B31F13B9F45E122698D5