SOPS

Sops.md

SOPS values encription

Private key retreival

Option 1 - bitwarden share

get base64 encoded key from

echo 'my' | base64 -d

Option 2 - fetch directly from the cluster

kubectl -n flux-system get secret sops-age -o jsonpath='{.data.age\.agekey}' | base64 -d

Add to user sops private key files

• linux: ~/config/sops/age/keys.txt
• macos ~/Library/Application\ Support/sops/age/keys.txt

echo "sopsPrivateKey" >> ~/config/sops/age/keys.txt

Encrypt file

sops -i -e $(pwd)/values.sops.yaml

Decrypt file

sops -i -d $(pwd)/values.sops.yaml