.sops.yaml

---
keys:
  - &user_sob age123w8qnhf7cdmgwmgmy8kvqhr6cd92kx4882y82cze23us376dgyqzf245n

creation_rules:
  - # IMPORTANT: This rule MUST be above the other
    path_regex: talos/talsecret(\.sops)?\.ya?ml
    input_type: yaml
    encrypted_regex: ^(token|crt|key|id|secret|secretboxencryptionsecret|bootstraptoken|ca)$
    key_groups:
      - age:
          - *user_sob
  - path_regex: talos/clusterconfig/.+\.sops\.ya?ml
    encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca|TS_AUTHKEY=)$
    key_groups:
      - age:
        - *user_sob
  - path_regex: talos/.+\.sops\.ya?ml
    input_type: yaml
    key_groups:
      - age:
          - *user_sob
  - path_regex: kubernetes/.+\.secret(\.sops)?\.ya?ml
    input_type: yaml
    encrypted_regex: ^(data|stringData)$
#    mac_only_encrypted: true
    key_groups:
      - age:
          - *user_sob

stores:
  yaml:
    indent: 2