.sops.yaml

---
keys:
  - &scotte age1p28u8xjm5sf7jdavc8xsqtw7lxgscefxs7a5dtqszr2885xeputsh9y64y
  - &main age1pwxsukhcw4j3x0q7x74e5suwmn48qs56ewlz9t2ndftg3mh36ftqfwcn8p
  - &staging age1cyqpra4hj22emvvsjyygd3mstyrf8vy0hktmvmv85kxgggqxzfns4pkdhy

creation_rules:
  - path_regex: ansible/.*\.sops\.ya?ml
    key_groups:
      - age:
          - *scotte
  - path_regex: kubernetes/main/.*\.ya?ml
    encrypted_regex: "((?i)(displayname|email|pass|secret($|[^N])|key|token|^data$|^stringData))"
    key_groups:
      - age:
          - *scotte
          - *main
  - path_regex: kubernetes/main/talos/.*\.sops\.ya?ml
    key_groups:
      - age:
          - *scotte
  - path_regex: kubernetes/staging/.*\.ya?ml
    encrypted_regex: "((?i)(displayname|email|pass|secret($|[^N])|key|token|^data$|^stringData))"
    key_groups:
      - age:
          - *scotte
          - *staging
  - path_regex: kubernetes/staging/talos/.*\.sops\.ya?ml
    key_groups:
      - age:
          - *scotte
  - path_regex: .*\.sops\.ya?ml
    key_groups:
      - age:
          - *scotte
  - path_regex: .*\.sops\.env
    key_groups:
      - age:
          - *scotte