fix: split secrets into individual encrypted files for KSOPS compatibility

KSOPS cannot handle multi-document YAML files; each secret needs its own encrypted file. Updated ksops-generator.yaml to reference all 7 secrets.
2026-04-19 23:38:19 +01:00
parent 40eb3b842c
commit f9097676c7
9 changed files with 186 additions and 42 deletions
@@ -0,0 +1,23 @@
+apiVersion: ENC[AES256_GCM,data:+rE=,iv:6V8DIeiL+5j7kzS3OuSXgArPhqLn04Wa/KoifCDOciQ=,tag:j+JJW61bELsePwJ2dfqKxQ==,type:str]
+kind: ENC[AES256_GCM,data:pIWaoeQi,iv:1yRMsEKS+fktnQW+uKnnmJVD4L0ddD63TY6eidSIKOs=,tag:jL4WmDBtfOG6sm5FBXrMHA==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:d6dDrnkNCf29T5Z1gFoJ85hb,iv:LdDvcvglvpoovGrHPSGLWxtXk8waS9i/zYMsYBpG8NE=,tag:gkF68mCh1jMixrFXC7Z+jw==,type:str]
+    namespace: ENC[AES256_GCM,data:TrRrdNXM,iv:Xf3AXVlR93CWBBhlRMB7q0SQdKiohzK/V9wOKXGTyis=,tag:Lf1z3FdESjPLa/tTApRU0Q==,type:str]
+type: ENC[AES256_GCM,data:FGwbGyKf,iv:yX05oJnqDKecf1Fs0KDPodFwXSSXGNK8EVhPzdZFGPM=,tag:b5KB4nfulU3ObEVDZOHn2g==,type:str]
+stringData:
+    token: ENC[AES256_GCM,data:ihpfWRkB41/g/NFje3WeF1YRUgFTKdKOGiiCH4uWMPFlTGwU074xKA==,iv:DrFTGMksxYw/2uyPLjR8lwmSwu7R8iVx1Wim8AzdEfI=,tag:NXbCHsrv0q4SklkvGMhMzw==,type:str]
+sops:
+    age:
+        - recipient: age1s0gzgh8c00tgnkgxrqyz2nu0k56xvc9ev3jdenkmu90egux9xfmsxvvj43
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQcTJPcXlSTHlJVG9WSEpL
+            UXh6eEhoTkV3T1JTcGpsTmRPcWtreFYvakNnCjllQUdUQm5vV0plSlpvU3g4bzh3
+            Wkh6THB1NTJqR21VMFM1VDNGTkVLOEUKLS0tIDdRVU9LR2lLWEFZVG9aTnkrLzBK
+            RVRKc01FZ28zT0s4NWVXSit4U2RZMmcKMkJlvMXPjT41/zpN0RM5XJOKCJwRiuOe
+            Ht0dm2182nT+cRzndX90gyItwqHiLcYb/JVjejln1JcD5fFGyiPqNA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-04-19T22:38:11Z"
+    mac: ENC[AES256_GCM,data:jRlYu7vjxV2LwAXMUqxrXhW2e2zh5EAPWgRH9hX6Ozr9UFoDPtpwSFOlX1ZGoqig37UwfK7no/aWIwejPUsPPjyPSX8XoR7OmDQVDBOX986/8xgT9AuEk209+Bau4mLptJQvELUGgQvUTJC6f8Q0mM6SRDICeVVo3p49LCXuhmQ=,iv:qjBED3IZtkZ+d3nb8KH2xBm1yuP5q5nkCR92FlP4piQ=,tag:ifTij0bliApEqpehke+omQ==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2