Difference between revisions of "Sops"
Jump to navigation
Jump to search
↑ https://github.com/mozilla/sops#26adding-and-removing-keys
| Line 3: | Line 3: | ||
* https://github.com/mozilla/sops | * https://github.com/mozilla/sops | ||
* Support: [[AWS KMS]], [[GCP KMS]], [[Azure Key Vault]], [[age]], and [[GPG]] | * Support: [[AWS KMS]], [[GCP KMS]], [[Azure Key Vault]], [[age]], and [[GPG]] | ||
| − | * Related env variables: <code>SOPS_KMS_ARN, SOPS_PGP_FP, [[SOPS_GCP_KMS_IDS]], SOPS_AZURE_KEYVAULT_URLS</code> | + | * Related env variables: <code>SOPS_KMS_ARN, SOPS_PGP_FP, [[SOPS_GCP_KMS_IDS]], SOPS_AZURE_KEYVAULT_URLS</code> <ref>https://github.com/mozilla/sops#26adding-and-removing-keys</ref> |
== Examples == | == Examples == | ||
Revision as of 08:33, 6 October 2022
- https://github.com/mozilla/sops
- Support: AWS KMS, GCP KMS, Azure Key Vault, age, and GPG
- Related env variables:
SOPS_KMS_ARN, SOPS_PGP_FP, SOPS_GCP_KMS_IDS, SOPS_AZURE_KEYVAULT_URLS[1]
Contents
Examples
sops --helpsops --encrypt --in-place your_filesops --encrypt --gcp-kmssops --decrypt --in-place your_filesops --gcpsops --azure-kvsops --rotatesops your-new-file
sops Error: no file specified
GCP KMS
To encrypt or decrypt a document with GCP KMS, specify the GCP KMS resource ID in the --gcp-kms flag or in the SOPS_GCP_KMS_IDS environment variable. (you need to setup google application default credentials. See https://developers.google.com/identity/protocols/application-default-credentials)
Related
See also
- SOPS,
sops | sops -d | sops -e | sops exec-env | sops exec-file | sops publish | sops keyservice | sops groups | sops updatekeys | sops --help - Secrets: Kubernetes secrets,
ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager,git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager
Advertising:
