fix: split secrets into individual encrypted files for KSOPS compatibility

KSOPS cannot handle multi-document YAML files; each secret needs its own encrypted file. Updated ksops-generator.yaml to reference all 7 secrets.
2026-04-19 23:38:19 +01:00
parent 40eb3b842c
commit f9097676c7
9 changed files with 186 additions and 42 deletions
@@ -0,0 +1,27 @@
+apiVersion: ENC[AES256_GCM,data:flg=,iv:83F3hv2qP3ASBB0lQ7g+QjjoXk0KMFn5V2IvHH11yOk=,tag:Q3rkQD0aKmwqpYL+TSYJfA==,type:str]
+kind: ENC[AES256_GCM,data:Jk69Vv9H,iv:rtddSB8OSwWR82N6f43rz57H0oTMjzqq3aODCg3v9rU=,tag:iFHeJUsAlro6hgT8tupdJg==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:ewPTx2Lq00hgzYyeVa2+oM6LgFQDK8gg5hLL,iv:1J1Wy46Hvr6mp85q9fv99B9cfsTuExjvpoTDB/8myrY=,tag:DaC/cJ7vkrKMu6Oz7/DJjA==,type:str]
+    namespace: ENC[AES256_GCM,data:S6wkoPiJ,iv:Cy5HLamnoj1np9bt7ODeGUTucH2PQSxTOPgJl4QfPsQ=,tag:pEepbzA1a0CTmi0tuFA1kA==,type:str]
+    labels:
+        app.kubernetes.io/component: ENC[AES256_GCM,data:8d2YjLFBp3VPl2zeuxJfOzm788lCAZ3d,iv:qiSqfljW5Hm+Rj5uQ2wSNPMlpwpGIMb8McBMh1LZGaw=,tag:1o+ZMmq3RL3BzUFB6h42nA==,type:str]
+        app.kubernetes.io/name: ENC[AES256_GCM,data:MFLQilzVzVtXvL/aNV+w4vV4FtS5m80VO34HxkxFyQ==,iv:BNIT3ZRHdzumBUjJdmH/mDihAM5NnyE0HQfwznuJiCk=,tag:rKzodfi6OxO81RK7ZqXaFA==,type:str]
+        app.kubernetes.io/part-of: ENC[AES256_GCM,data:CbEvLB1O,iv:jummL2+j0lnceAtETXX3h7tS38JXzZxLA79u7Fp7IqA=,tag:jYyQkKOJE4nVXmU1MiviQg==,type:str]
+type: ENC[AES256_GCM,data:gAPVO9VZ,iv:3s1IB/K0wdApZlrxdaDBRDf3bBkU9GtCBDy3tZCBlMw=,tag:ZT848ft/1YThZw6ikdrNzw==,type:str]
+stringData:
+    gitea-token: ENC[AES256_GCM,data:/6S07DKQX8woDMwLfr/YMRX5RZkyuwZQneGaI26VTy25DKNHNxWOIw==,iv:qWC5ngTvJjFt9EPqhwZWeTtSAKKnGJuCnViN+MtJ09k=,tag:FosylS/Zn08jf39o/M8I6g==,type:str]
+sops:
+    age:
+        - recipient: age1s0gzgh8c00tgnkgxrqyz2nu0k56xvc9ev3jdenkmu90egux9xfmsxvvj43
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSZEJDem1jRUVsakpiNWFV
+            MHNIOGVHd2l2eFAvbThjNzhCeDh2KzVXTWdVCld6VnRQWGVmd2hWTTJqUFQ1L3Zt
+            Zk5XTURvUVRqSmswVitDdnprcUQ5MlUKLS0tIHpSaWc1NDZKNVR1KzFlaVN0QUVh
+            bmVLNHpyMkhHVmhZMjhDaFdad2l1UDAK2uMzseBvBCX3XaO2vrQYkVsnAqg+H2ri
+            l99fLmj7cj5psvULsz48Dmhxmj8tEWT3m7XDEIYqTq0WR9OAvHLLIQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-04-19T22:38:11Z"
+    mac: ENC[AES256_GCM,data:ZDE0axhBDCtkYXatCpf6og2s0PS3AYrJ31iQTMcdl5eQio7Q6a1YmvNAaQGW9z7EyrJvE2FXlP6scK52kDOB2cXFsXWC6/ZCgpW9Xjz8jxjzfXjycJdBEynTND2bnhXaYRIyZJBi5IeH/kmwc+o3VQvidqrhNHNjZIFq1cL516M=,iv:xATIsjbkpCWKht3/jYmvXA5zhajLNog39mUwHTneM1I=,tag:dIHuobyi09HBjHRXDc4jug==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2