.sops.yaml

creation_rules:

 - pgp: "ABBBBAABABABBABABABABBAABABABBAABABBABABABABA"

creation_rules:
 - gcp_kms: "projects/prod/
   path_regex: secrets.prod.dec.yaml$|secrets.prod.yaml$
   unencrypted_regex: secrets.prod.dec.yaml$
 - gcp_kms: "projects/dev"
   path_regex: cluster.secrets.dec.yaml$|cluster.secrets.yaml$
   unencrypted_regex: cluster.secrets.dec.yaml$

Related

• .hadolint.yaml

See also

• brew install sops, .sops.yaml
• SOPS, sops | sops -d | sops -e | sops exec-env | sops exec-file | sops publish | sops keyservice | sops groups | sops updatekeys | sops --help, kind: SopsSecret