encrypt and rotate secret

This commit is contained in:
Tobias Brunner 2023-01-08 17:57:30 +01:00
parent e240c44f72
commit 94eeec3149
Signed by: tobru
SSH key fingerprint: SHA256:kywVhvCA+MIxL6eBgoQa+BfC/ROJqcfD2bpy1PR6Ebk

View file

@ -1,7 +1,27 @@
apiVersion: v1
Kind: Secret
metadata:
name: postgresql-creds
name: postgresql-creds
stringData:
ADMIN_PASSWORD: iej0Eish4eir6maeYie9ookehee7Iaph
USER_PASSWORD: doiKuShaicee2AhXe1Ij3ahqueighei0
ADMIN_PASSWORD: ENC[AES256_GCM,data:uRX6Md+LqThGcpwbopZOun0WI8oVQk5MdTQ6PMp338E=,iv:Ip1AuX2IjSg3eBIW7MXQWIh8wMlIEVsLxUdKzb80ShE=,tag:fFDDvwg9XLPApBOt/2DfiA==,type:str]
USER_PASSWORD: ENC[AES256_GCM,data:5wdJETfa9EY58gDsNjUR7FC5ddPz13lMS7pa+B+a898=,iv:QK/AbxyN7FFC6mnYn8cijnp4xiGirihHuTmR9hwZdc4=,tag:JWNQ4QAOCC9ZN/mIbpC9cg==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRjBXRjRIb2JpNi9tQkJj
MDIzZC9MWXM5dzlPWkgyekNlcFByaHNNdWwwCktoYndzLzlBMjNSSnVjQVM2VDdX
RVR1SDlkOTFtMFFzNm5jRlFndmhiVkkKLS0tIENFWlZ5aU5KMjFnUG1jTGRBQUtW
ZTJhWnhKZ3dNTTFhWmNBbjhoVWZRSk0KU/WLOmnMwPUbz51hUyHUzAai7URXWYjC
PrO7935GYcrwsr7aTkRI4qb+37J16G3+M2wR3bhrELBuuIbUdfdjbg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-01-08T16:57:04Z"
mac: ENC[AES256_GCM,data:I2BDM3+AtIQvgipF1FeAqAClVzW4T13g9BrXCWHy4CnLZFtwtb6mJz114ckvJyw5R0fw6FpfIVsIfbNZ/0pmZwno79T6ARV69b2WOW0KgoOlRSRWn/3MXVCk3w56J0rIhLFO3+UEN1c2DpkbrKhY0mPyZ+l6Bbt9qvRh/FPPJEc=,iv:jvaMSpZoGzOm+iGCrUHMb58NumQO+e6MfD//T3VP+rw=,tag:Vapjsbjaw0o/+SDhsYy9dA==,type:str]
pgp: []
encrypted_regex: ^(data|stringData)$
version: 3.7.3