1. **Status**: New User has access to SOPS-Encrypted Secrets within Project Repo
1. **Status**: New User has access to SOPS-Encrypted Secrets within Project Repo
1. **Hand-Off**: Proceed to next steps; Instruct New User to verify access to secrets
1. **Hand-Off**: Proceed to next steps; Instruct New User to verify access to secrets
#### Example
#### Example
@ -164,30 +164,18 @@ SOPS is used for encrypting secrets, e.g. credentials for various systems
## Install
## Install
### 1. Install Sops
1. **Install Sops**
1. https://github.com/getsops/sops
https://github.com/getsops/sops
- Note:
* MacOS: If desired, one can also use brew to install sops: `brew install sops`; although this is not officially maintained, [the formula is essentially the same as the official installation instructions](https://github.com/Homebrew/homebrew-core/blob/4496ce5131bc09e7065fa0aa8fb96366a3df6477/Formula/s/sops.rb)
Note:
1. **Configure Sops**
* MacOS: If desired, one can also use brew to install sops: `brew install sops`; although this is not officially maintained, [the formula is essentially the same as the official installation instructions](https://github.com/Homebrew/homebrew-core/blob/4496ce5131bc09e7065fa0aa8fb96366a3df6477/Formula/s/sops.rb)
* Add the following to your `~/.bashrc` or `~/.zshrc` - but _not_ to your `~/.profile` as it must be set per session:
```shell
### 2. Configure
# Enable interactive passphrase prompt for SOPS
export GPG_TTY=$(tty)
Add the following to your `~/.bashrc` or `~/.zshrc` - but _not_ to your `~/.profile` as it must be set per session:
```
1. **Verify SOPS Installation and Key Configuration**
```shell
1. `./verify/usr_confirm_keycfg.sh`
# Enable interactive passphrase prompt for SOPS
export GPG_TTY=$(tty)
```
### 3. Verify
Run the following command to verify local SOPS installation _and_ key configuration: