You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

935 B

Raw Blame History

howto create a gpg key

please follow instruction on following link: https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key
add ONLY the PUBLIC part of your gpg key!!!
checkin via MergeRequest/PullRequest

import gpg keys

gpg --import /path/to/keys/*.gpg.pub

list imported gpg keys

gpg --list-keys --keyid-format=long

Configure SOPS

GPG_TTY=$(tty) sops secrets.yaml

Note: GPG_TTY src: https://www.varokas.com/secrets-in-code-with-mozilla-sops/

Example

#!/usr/bin/env bash
set -ueo pipefail
# demo: create a file with a mock secret, src: https://bash-org-archive.com/?244321
yq -n '.demo.credentials.secret = "hunter2"' > secrets.yaml
# encrypt
sops -e -i secrets.yaml

# decript, print to console
sops -d secrets.yaml

Archive Expired Keys

mkdir archive
mv ${keyname} "archive/${keyname}_$(date '+%Y-%m-%d').archive"

935 B Raw Blame History