riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

security: restore old public key in .sops.yaml for cluster decryption
CI / CI (push) Successful in 4m46s
Details

Browse Source 
Keep both public keys in .sops.yaml:
- Old key: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
  (existing cluster secrets are encrypted with this)
- New key: age1ryxmuwhecmdru786eqgek4cf8ppq585j2uqr7e87phya42w9s5wscn6tgp
  (new secrets will be encrypted with this)

Private keys remain secure in cluster (sops-age secret).
Public key history cleaned from git (see prior commits).
This commit is contained in:
Admin Bot
2026-09-13 11:10:34 +09:00
parent 4a00312906
commit 4341b1109b
3 changed files with 14 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/gateway-config-secret.enc.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ sops:
TVYvcTFHVEMwdk8wb2lZbzBMcWdMOEUKrbjTZ7AeuNqfyWolsYGh0Dc5bE2bDU+y
vXI+gz8GwN+VNR06G39uE8wAIvlCL9rJocWx9uNcCChZGCaaJu3GPQ==
-----END AGE ENCRYPTED FILE-----
recipient: ***REMOVED***
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
encrypted_regex: ^data|^stringData
lastmodified: "2026-09-13T01:04:23Z"
mac: ENC[AES256_GCM,data:LN3J+B0QonolFEeisj+NwYjp6F196uIcDyxf4ZoLdAs67Pmpi2YBtB0J4BEbUirR9N13M5k9gWjtDJwgHONYBCjEGC4sCQS3JvNkvwiTf7uSCKaY5+Qq71VtUljf9c9P+Ni/D+zGEVTWHFYtirnsnGpxb/YNYDvbxLFRRI+sLKg=,iv:HQP/SeN+6spVpLRIrYsyBVpbji7YC1oK3lCPmmB0OK0=,tag:e+yfBwzPXSqvBMU4Wn/Tfg==,type:str]