Skip to content

Commit b20d4f2

Browse files
felixfonteinsimcax
andcommitted
Added example of having age recipients in .sops.yaml
Fixed formatting for example of multiple age keys in .sops.yaml Added example of using updatekeys with age Apply suggestions from code review Apply suggestions from code review Converted from getsops/sops@59440d9 Co-authored-by: Carsten Skov <carsten@simcax.dk> Signed-off-by: Carsten Skov <carsten@simcax.dk> Signed-off-by: Felix Fontein <felix@fontein.de>
1 parent f66d6b8 commit b20d4f2

1 file changed

Lines changed: 22 additions & 0 deletions

File tree

content/en/docs/_index.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -234,6 +234,28 @@ decrypt the data.
234234

235235
Encrypting with SSH keys via age is not yet supported by SOPS.
236236

237+
A list of age recipients can be added to the `.sops.yaml`:
238+
239+
``` yaml
240+
creation_rules:
241+
- age: >-
242+
age1s3cqcks5genc6ru8chl0hkkd04zmxvczsvdxq99ekffe4gmvjpzsedk23c,
243+
age1qe5lxzzeppw5k79vxn3872272sgy224g2nzqlzy3uljs84say3yqgvd0sw
244+
```
245+
246+
It is also possible to use `updatekeys`, when adding or removing age recipients. For example:
247+
248+
``` sh
249+
$ sops updatekeys secret.enc.yaml
250+
2022/02/09 16:32:02 Syncing keys for file /iac/solution1/secret.enc.yaml
251+
The following changes will be made to the file's groups:
252+
Group 1
253+
age1s3cqcks5genc6ru8chl0hkkd04zmxvczsvdxq99ekffe4gmvjpzsedk23c
254+
+++ age1qe5lxzzeppw5k79vxn3872272sgy224g2nzqlzy3uljs84say3yqgvd0sw
255+
Is this okay? (y/n):y
256+
2022/02/09 16:32:04 File /iac/solution1/secret.enc.yaml synced with new keys
257+
```
258+
237259
## Encrypting using GCP KMS
238260
239261
GCP KMS uses [Application Default

0 commit comments

Comments
 (0)