Mozilla sops

.sops.yaml

creation_rules:
  - filename_regex: '.*/secrets\.y(a)?ml$' # looking for all `secrets.yaml` files and encrypt
    kms: 'arn:aws:kms:AWS_REGION:12345678912:alias/KMS_ALIAS'
    aws_profile: PROFILE

README.md

Installation

Here: https://fluxcd.io/flux/guides/mozilla-sops/

brew install gnupg sops

VScode extension

@signageos/vscode-sops

https://marketplace.visualstudio.com/items?itemName=signageos.signageos-vscode-sops

Encrypt a file

sops --encrypt path/to/secrets.yml > path/to/secrets-TMP.yml