howto create a gpg key

• please follow instruction on following link: https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key
• add ONLY the PUBLIC part of your gpg key!!!
• checkin via MergeRequest/PullRequest

import gpg keys

gpg --import /path/to/keys/*.gpg.pub

list imported gpg keys

gpg --list-keys --keyid-format=long

Configure SOPS

GPG_TTY=$(tty) sops secrets.yaml

Note: GPG_TTY src: https://www.varokas.com/secrets-in-code-with-mozilla-sops/

Example

#!/usr/bin/env bash
set -ueo pipefail
# demo: create a file with a mock secret, src: https://bash-org-archive.com/?244321
yq -n '.demo.credentials.secret = "hunter2"' > secrets.yaml
# encrypt
sops -e -i secrets.yaml

# decript, print to console
sops -d secrets.yaml