Difference between revisions of "Sops"
Jump to navigation
Jump to search
| Line 2: | Line 2: | ||
[[wikipedia:Sops]] | [[wikipedia:Sops]] | ||
* https://github.com/mozilla/sops | * https://github.com/mozilla/sops | ||
| − | * Support: [[AWS KMS]], [[GCP KMS]], [[Azure Key Vault]], [[age]], and [[GPG]] | + | * Support: [[AWS KMS]], [[GCP KMS]], [[Azure Key Vault]], [[age]], and [[GPG]] |
| + | * Related env variables: <code>SOPS_KMS_ARN, SOPS_PGP_FP, SOPS_GCP_KMS_IDS, SOPS_AZURE_KEYVAULT_URLS</code> | ||
== Examples == | == Examples == | ||
Revision as of 08:33, 6 October 2022
- https://github.com/mozilla/sops
- Support: AWS KMS, GCP KMS, Azure Key Vault, age, and GPG
- Related env variables:
SOPS_KMS_ARN, SOPS_PGP_FP, SOPS_GCP_KMS_IDS, SOPS_AZURE_KEYVAULT_URLS
Contents
Examples
sops --helpsops --encrypt --in-place your_filesops --encrypt --gcp-kmssops --decrypt --in-place your_filesops --gcpsops --azure-kvsops --rotatesops your-new-file
sops Error: no file specified
GCP KMS
To encrypt or decrypt a document with GCP KMS, specify the GCP KMS resource ID in the --gcp-kms flag or in the SOPS_GCP_KMS_IDS environment variable. (you need to setup google application default credentials. See https://developers.google.com/identity/protocols/application-default-credentials)
Related
See also
- SOPS,
sops | sops -d | sops -e | sops exec-env | sops exec-file | sops publish | sops keyservice | sops groups | sops updatekeys | sops --help - Secrets: Kubernetes secrets,
ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager,git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager
Advertising:
