|
|
|
@ -18,14 +18,15 @@ GPG_TTY=$(tty) sops secrets.yaml
|
|
|
|
# GPG_TTY src: https://www.varokas.com/secrets-in-code-with-mozilla-sops/
|
|
|
|
# GPG_TTY src: https://www.varokas.com/secrets-in-code-with-mozilla-sops/
|
|
|
|
|
|
|
|
|
|
|
|
## Example
|
|
|
|
## Example
|
|
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
```bash
|
|
|
|
#!/usr/bin/env bash
|
|
|
|
#!/usr/bin/env bash
|
|
|
|
set -ueo pipefail
|
|
|
|
set -ueo pipefail
|
|
|
|
# demo: create a file with a mock secret, src: https://bash-org-archive.com/?244321
|
|
|
|
# demo: create a file with a mock secret, src: https://bash-org-archive.com/?244321
|
|
|
|
yq -n '.demo.credentials.secret = "hunter2"' > mock_secrets.yaml
|
|
|
|
yq -n '.demo.credentials.secret = "hunter2"' > secrets.yaml
|
|
|
|
# encrypt
|
|
|
|
# encrypt
|
|
|
|
sops -e -i mock_secrets.yaml
|
|
|
|
sops -e -i secrets.yaml
|
|
|
|
|
|
|
|
|
|
|
|
# decript, print to console
|
|
|
|
# decript, print to console
|
|
|
|
sops -d mock_secrets.yaml
|
|
|
|
sops -d secrets.yaml
|
|
|
|
```
|
|
|
|
```
|