fix: split secrets into individual encrypted files for KSOPS compatibility

KSOPS cannot handle multi-document YAML files; each secret needs its own encrypted file. Updated ksops-generator.yaml to reference all 7 secrets.
2026-04-19 23:38:19 +01:00
parent 40eb3b842c
commit f9097676c7
9 changed files with 186 additions and 42 deletions
@@ -0,0 +1,27 @@
+apiVersion: ENC[AES256_GCM,data:6pI=,iv:SOiwZYQ9ibt5cxUPsjFGKicXsE3s0aioI+yra2RRYek=,tag:/VH/FB3MOb4TRbE9U7YH6A==,type:str]
+kind: ENC[AES256_GCM,data:yBPlCctq,iv:mCLCcSPsRTvqHUl/M2bm092l7U1vBdOw7vI884Tl5Do=,tag:RzBsEWGOQP5E915j1qluAA==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:MgRKogbwDU3w4zoCOQ==,iv:oxGyw6J1/QFN0dM+qVzhnBKAgiUE1IlfIOnm8pdONK4=,tag:7RfvAzZLaBGbxjNTxmu5tw==,type:str]
+    namespace: ENC[AES256_GCM,data:XN8z9Tns,iv:6dr4MqhKNOO6TUEmcKxwrzOdI39383UsfC6h9LM0ziU=,tag:EPmtKFsB7kAuTwyG26mkEQ==,type:str]
+    labels:
+        app.kubernetes.io/name: ENC[AES256_GCM,data:svBm8BdGpGQRm1K0wA==,iv:gqf17yYOr13LeEJ4uA85evTYo9M5cLn/pX01bJEzgU0=,tag:PeQ7I9drbhFbcmncsfxIOQ==,type:str]
+        app.kubernetes.io/part-of: ENC[AES256_GCM,data:zLxaf5eR,iv:86lK8tESmNUu+3naA7N74bFHJ2CQTi57ctvFmI09h5U=,tag:Otztl8aFAaon0Mrg+D6dfQ==,type:str]
+type: ENC[AES256_GCM,data:81RzU4Gg,iv:A0PYn779KKH1abtaeJd2mNG5I4gzM34xPJfWxPzZDQg=,tag:Uo/8mRYAEV5QgvObBh9JCA==,type:str]
+stringData:
+    admin.password: ENC[AES256_GCM,data:CGKjrnQaoGLTSXYbtdxJM6MzMR3bJT8s/7EMoprAI7+4t7Dl3GMMOg7dsCcJ6l+42bUWoTNIIRIS6wYW,iv:UPxi2Fc0jtpVDJpFP657zvZ8Qk55o4eekkuTVjpWJ8I=,tag:EW+aQVirTcABMWqtMDV3xg==,type:str]
+    server.secretkey: ENC[AES256_GCM,data:JtlnOyf6eJcHOhP0jAtTL5kT9iqJtu0fiozybnpxGZAhYVQl6vB62R4WlIQ=,iv:x0AU+L3CD1e8sgwD4lC+8XxmzQ4lH7QG8o2FZqI6XKk=,tag:z2gZ2nRofFD0sEYAxRhYVw==,type:str]
+sops:
+    age:
+        - recipient: age1s0gzgh8c00tgnkgxrqyz2nu0k56xvc9ev3jdenkmu90egux9xfmsxvvj43
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPR0FlOE0wNDFKcm1nUUFk
+            WFB0WWtiMlZmeXJwdStYOW04aDQ2QTVYaVV3ClZ6dFlNanI1WVJxMlM1cXB5a3dW
+            Y0Q3dHd0M0ltRWp2bTNQbGtuakUzTGsKLS0tIElsMmRGM3AzZU9NZGRDMUhvSXY4
+            VUlLT2JCSVpWWVY5MVhWUlI4VWpiZ2MKC/Z6MSEhX0iqd8a8zpgPAKFiUiuNHW6k
+            3u+7+kBsO4Ghww2qhlIzP+AuhEULHTLGoFjePmZNauWTikGmXgHpZw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-04-19T22:38:11Z"
+    mac: ENC[AES256_GCM,data:bfMCYfasYyS6yiJCSn3UQQreL0idoc+1eSqR9Z1vNW7lq7t0vQWy2oW6v8ds+oQH+6ODg5cQT+u4IX7btR8C6ffq84z4Abw0K5ul3POJtkWGvjtnJt2EF2Dvg+q497gUK2LOZR/fFdXSImoTDedFqf/DBV+0DL0QHru/UKIuOOA=,iv:5Ks3iLG6tAT92s+3CINe8jv20qoue8NYmI9Z5WqNmbs=,tag:et5xcTjzIagB4feoYmoDBg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2