updated sops for token encryption

2024-05-14 12:35:16 -04:00 · 2024-05-14 12:35:16 -04:00 · ab7f0bb667
parent 0f2ecadfe6
commit ab7f0bb667
4 changed files with 45 additions and 37 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -1,2 +1,3 @@
 creation_rules:
+- encrypted_regex: "^(token)$"
  age: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
--- a/kx3dex-radio/prod/secrets.yaml
+++ b/kx3dex-radio/prod/secrets.yaml
@ -1,27 +1,27 @@
-apiVersion: ENC[AES256_GCM,data:zDo=,iv:OdsBbgcGWHb+woMF2NCbsVOLfklvXoDW3/z3F4Pv7Mk=,tag:2umbO87q0E++w+2zLEkLDg==,type:str]
-kind: ENC[AES256_GCM,data:gDAi/I3N,iv:S1ggod/HX1IXTdPNWycExMgWT5mOXE+2OJDB4Rcl3Wo=,tag:IJr+8ACM69M4cX2CkOgZbg==,type:str]
+apiVersion: v1
+kind: Secret
 metadata:
-  labelsname: ENC[AES256_GCM,data:J6nrRKIdz2Q4BQ==,iv:pxtI7t5QZrk6CS9cGPhY0Pdbwp6NuTUrbFluNMxffI4=,tag:CMEOWot4kHQd1KFIC/dgjg==,type:str]
-  namespace: ENC[AES256_GCM,data:6QC/3SvO3uDHUarK,iv:fRXXyEJ00/0X5OrqJQRMneRdhX5v3rF9b/hCToXrP4A=,tag:ZHpBT4zoNhlX6e+N5lpehA==,type:str]
+    labelsname: cf-secrets
+    namespace: kx3dex-radio
 data:
-  token: ENC[AES256_GCM,data:J3B5CP3PvZgx3w1gIMOzrWTS5pWWsmhh1GhnOa+by50FhyM13aN23cUzxJs3n0Sv9rso9OS8F5q4R7dsHnjwdYBa9vecc6Uq65sGKxHx9T5b5sHylbw5giEKqetgUwI6ympPly60U0gTvfD6g5MZYABfaCO8En3rRYD7A1CcZKzwPXfpZ2rQ7Eayde7f6RuFt16xRz4h01uqUWmfIKDcVa2dMODlZ+L7u7f4ZiZWHQgl/PKXl5kyJA==,iv:+jV2+xGR7Sp2AvdRGlmREISolFiEblabt8cR26Hdmeg=,tag:w4rRzfFYR7Ij2ukPomNnfw==,type:str]
+    token: ENC[AES256_GCM,data:+bpXEJTy+U9qcLcR/1171EwHGfjdsmLDDMzMsLR1+brVNL22Gbw4pKudnEQ5gHpC3UK25Y5hTK5lXiyVyfra7bzYOy07y3u56nJUs0KkpyR+nf21goqFkkHPlTd5MUd3yKqaAefe2LsQU/50tgE96cPub6pSvOQtNZswT2DnBqG1LN9tB4E140Z8BtjhET+QhBg5JbxLUlCBaYxaOerN/AD3FScwznuZIXf1kEKONa0q4su0YVrd3g==,iv:9FWlWHXTzEnbz9tVg3HqqBE6ms+mghSg+3EWfjrrr8w=,tag:Pn/Wn3WjEM/j8tbXag1GqA==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-  - recipient: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
-    enc: |
-      -----BEGIN AGE ENCRYPTED FILE-----
-      YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQVorcjRuOHNpeEFWZjhF
-      MjlvUmVsOXdpSlJXS2FydGRvZHpyV0M3RzBzCmFjUGNzUzNkamJjbE82aWFqbzRp
-      cDU3S3R4RTFhN2VzNFJ2UUZXdE8zZ28KLS0tIGwxZ2xTZUx5R3lka291aC9aTEFv
-      MnhYRmt0aG40MHZLRHMvMzFrdkhZOVkKaJv3tewfKqEL2Uubql1FzzKHNHc0xCzJ
-      VaCcR2wL5+2hMunv+iPHVZ3w0mLalHOpfC/klwTOyj0/YruUREg8Sw==
-      -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-05-14T07:22:52Z"
-  mac: ENC[AES256_GCM,data:lerScKGM7NS59RWSbEvlta01qZfMJTSKAFNizQDCB/RT5iTIRWiJwRaJVm06Va7MnqXSVu2Q+Uy4JS3ugtduIziTucI+bX971yTHsfYH4prZ7pytuPoQronKfQ8S3anlTibU0JlziIvFziU2LLUGZqX56kfZpAFe9OR2GuIy3FU=,iv:+bprd74LRUoOc64Y+8Xgna85ZZ/pzDlleF7izX436Lc=,tag:Sqj9zz0z6w8ZBJRKN72q2Q==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.8.1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5S2VsWk02VzFCeTErVDVl
+            THlPOGxtSmFpMzJkR1FxR3dPQWpzYnpEbFhNCnZQSzhzYjBnOUhVMGd6NmU3YnFC
+            MWdNR0tRQ3ZHWHV3UHlJZWQrMWdtNmMKLS0tIFV5L1Rnb1BpRVBNWTFZSHJlSU5P
+            dis4VmhEN0RlL1NwKzhMaHVoWHVhNk0KqHazjvS8jA3MUVmAv3pL0dMubNPZdyEl
+            I6O2YKbnCQ89kFiL6qfhi4KATRHUvgUjGtoiV9jhrBpIK2tR9aYysQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-05-14T16:34:41Z"
+    mac: ENC[AES256_GCM,data:QudvMx79EvorUUuyyAluh/U7+fULsYSWrB2sulqI0XHcuJe/x7FfqSAeRlRucO0zskwBgFekzHXokTKJyfo8gvJUTlajNPoC3MoAOXknfrAarBM+btkdmqoXmW/5Q0n2aZpApV73PPFbrBYAJVZjafk42PqLnGiQoVsjF3eJcHw=,iv:gSGJsxojxVC0lEs2t0fgt1nOpncp7JfLMnL7iQccKbI=,tag:S+khFbhi9Qa/+RqCtGEwkw==,type:str]
+    pgp: []
+    encrypted_regex: ^(token)$
+    version: 3.8.1
--- a/simplysyncedllc-com/prod/.decrypted~secrets.yaml
+++ b/simplysyncedllc-com/prod/.decrypted~secrets.yaml
@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    labelsname: cf-secrets
+    namespace: kx3dex-radio
+data:
+    token: eyJhIjoiZGNhNDU5YWMwNzJkODI2NGQ1NTViZjM1MTk1OTJjNTMiLCJ0IjoiMGVmZDVjMjUtYjhkOS00MTEzLWJlNmMtNmI1M2I1NDc4Y2E1IiwicyI6Ik9EbGtOREV4TW1NdE1HSm1PQzAwTURNNExXRXpOakF0Wm1RM01XUXhOell6WXpoaiJ9
--- a/simplysyncedllc-com/prod/secrets.yaml
+++ b/simplysyncedllc-com/prod/secrets.yaml
@ -1,10 +1,10 @@
-apiVersion: ENC[AES256_GCM,data:zDo=,iv:OdsBbgcGWHb+woMF2NCbsVOLfklvXoDW3/z3F4Pv7Mk=,tag:2umbO87q0E++w+2zLEkLDg==,type:str]
-kind: ENC[AES256_GCM,data:gDAi/I3N,iv:S1ggod/HX1IXTdPNWycExMgWT5mOXE+2OJDB4Rcl3Wo=,tag:IJr+8ACM69M4cX2CkOgZbg==,type:str]
+apiVersion: v1
+kind: Secret
 metadata:
-    labelsname: ENC[AES256_GCM,data:J6nrRKIdz2Q4BQ==,iv:pxtI7t5QZrk6CS9cGPhY0Pdbwp6NuTUrbFluNMxffI4=,tag:CMEOWot4kHQd1KFIC/dgjg==,type:str]
-    namespace: ENC[AES256_GCM,data:OwMsX7HswQg7EW0dUCUaAFaXNQ==,iv:Wgl6V0VFsJqCQxV5eioBpBC6tmdcvH0DNgzf8c+DzoM=,tag:WziJlzS5bV6z0vWkhNGpLw==,type:str]
+    labelsname: cf-secrets
+    namespace: kx3dex-radio
 data:
-    token: ENC[AES256_GCM,data:J3B5CP3PvZgx3w1gIMOzrWTS5pWWsmhh1GhnOa+by50FhyM13aN23cUzxJs3n0Sv9rso9OS8F5q4R7dsHnjwdYBa9vecc6Uq65sGKxHx9T5b5sHylbw5giEKqetgUwI6ympPly60U0gTvfD6g5MZYABfaCO8En3rRYD7A1CcZKzwPXfpZ2rQ7Eayde7f6RuFt16xRz4h01uqUWmfIKDcVa2dMODlZ+L7u7f4ZiZWHQgl/PKXl5kyJA==,iv:+jV2+xGR7Sp2AvdRGlmREISolFiEblabt8cR26Hdmeg=,tag:w4rRzfFYR7Ij2ukPomNnfw==,type:str]
+    token: ENC[AES256_GCM,data:4WzeRqXqV5bvXMrHph1+4O3y1Tlh1eaha6ho7+bVaT2zOkqMAB68ZsaYDeZDE5XDSMBT9CBufOz6jqAvXYHJtllmylTS2aWiepQGuUgOCwiNaYPh2vKVXDL1CFTBg8liWhR1B6qV6SttQxJhqQnIsZX28IC85nfX4brp9OyjfzguazhgCljnZtLCJikX0/d7dBLrSONJGqLkWcKmhy1ZWic7QH73aoW7irzhGPfoF/IGKCkZuwRAJw==,iv:hBH9rXXTAwCGFE5kBRF59tlsAe0K8UXG//qSPqUOZo0=,tag:GWJ3dtoTlPeb2PS58a5TCg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -14,14 +14,14 @@ sops:
        - recipient: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQVorcjRuOHNpeEFWZjhF
-            MjlvUmVsOXdpSlJXS2FydGRvZHpyV0M3RzBzCmFjUGNzUzNkamJjbE82aWFqbzRp
-            cDU3S3R4RTFhN2VzNFJ2UUZXdE8zZ28KLS0tIGwxZ2xTZUx5R3lka291aC9aTEFv
-            MnhYRmt0aG40MHZLRHMvMzFrdkhZOVkKaJv3tewfKqEL2Uubql1FzzKHNHc0xCzJ
-            VaCcR2wL5+2hMunv+iPHVZ3w0mLalHOpfC/klwTOyj0/YruUREg8Sw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVFVHSnEwRndzS3F3S2pq
+            V1U1VGtsV3R6dHovN0xTbHhlSVRCNnBvdTFRClVReXpQdC84NXpXdCtTeVlhMnVC
+            c3ZXOVFGUjNQM3gzNlV2Z3RUL2pybEkKLS0tIEZVemdhVUNMVDZPVUtiQnFWVloy
+            VWNLUExoV0JHRmdNdFk2V3NRQzBQS2MKpcLbt0YD+9mZTfbGhaId8rai3Sk9YWMQ
+            nUhkJOQIq6SNh1SEar2VmgkA+NlmrR1o70lGUW8OhhJxSvWzo2s53g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-14T07:20:13Z"
-    mac: ENC[AES256_GCM,data:OEmbjFc3zo7RXrNW+KhgMiKfmSfPLMiJOYi05A0OkXWcKk2WNNMME7qvgSFkbw97wfdV2DCpSspUhk0qkq4JQSl4vN7gehMWabX7LjmUSsTwHjoNLpnIT1N8vnQxaC0meC8UN+kEcG4C9SQ4DDj8Tz1gJ7O4NCLrQr/SRjs2ZpU=,iv:ZRIwK08sWcdpb/oCIcc/bKk/A36+edBxI17BPQK0xA0=,tag:0LMxY9KS58BlMAVxZfR8RQ==,type:str]
+    lastmodified: "2024-05-14T16:29:55Z"
+    mac: ENC[AES256_GCM,data:RlLwRaTKPKnnEjqR2iu3yvyczrAPqBcFfWA6LFzs068lTpiWb6NFSBQ0cya63caFgz11L4fMA0iocIlNOtrSoKtjfIM5agWkxfgfa05svfnqNfDwyiWiYIpk772nMy1XtX7kbNL/R8behjCo50Mf25ishCSlp1WUCtI1claZHLw=,iv:kqU8h27+V5t6lDqaGldm3+EHERS+XvK33KFzcJCCPDA=,tag:DqzGn2sdBEOsxQ+4NfjFRw==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(token)$
    version: 3.8.1