run gradient cache
This commit is contained in:
parent
66d6857710
commit
05c8508c18
10 changed files with 424 additions and 130 deletions
43
.sops.yaml
43
.sops.yaml
|
|
@ -1,38 +1,11 @@
|
|||
# SOPS configuration for StuRa HTW Dresden infrastructure
|
||||
#
|
||||
# This file defines which keys can decrypt which secrets.
|
||||
# Add GPG public keys (.asc files) or age keys to keys/hosts/ and keys/users/
|
||||
# to grant decryption access to hosts and users respectively.
|
||||
|
||||
keys:
|
||||
# Admin/user keys - add GPG public keys here
|
||||
# Example:
|
||||
# - &user_admin_key age1... or pgp fingerprint
|
||||
|
||||
# Host keys - add host-specific keys here
|
||||
# Example:
|
||||
# - &host_proxy_key age1... or pgp fingerprint
|
||||
# - &host_git_key age1... or pgp fingerprint
|
||||
|
||||
# Define which keys can access which files
|
||||
creation_rules:
|
||||
# Default rule: all secrets can be decrypted by admin keys
|
||||
- path_regex: secrets/.*\.yaml$
|
||||
# key_groups:
|
||||
# - pgp:
|
||||
# - *user_admin_key
|
||||
# - age:
|
||||
# - *user_admin_key
|
||||
- &goeranh age16m8vvvpw4azfy6gygtstyyj6nd2sf848f7f7argaghwhct38muxsgxpeek
|
||||
- &gradient age1kfxhahmxprheer63shv68slpmk5qz29nyx3kp4q6n879zz9ha34q04n50x
|
||||
|
||||
# Host-specific secrets (example)
|
||||
# - path_regex: secrets/proxy/.*\.yaml$
|
||||
# key_groups:
|
||||
# - pgp:
|
||||
# - *user_admin_key
|
||||
# - *host_proxy_key
|
||||
|
||||
# - path_regex: secrets/git/.*\.yaml$
|
||||
# key_groups:
|
||||
# - pgp:
|
||||
# - *user_admin_key
|
||||
# - *host_git_key
|
||||
creation_rules:
|
||||
- path_regex: hosts/gradient/secrets.sops.yaml$
|
||||
key_groups:
|
||||
- age:
|
||||
- *gradient
|
||||
- *goeranh
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue