ImmutableGate APPs

repo for app deployment

• Encyption TOOL: SOPS

Prerequisite

• AGE
• SOPS
• Bitwarden Secret Manager CLI Only needed when viewing/editing secrets locally.

    brew install age sops

Check Bitwarden Secret Manager document to see how to install and config. Ensure bws command can be used from your machine.

Usage

In-place encryption

sops -e -i localhost.sops.yml

Quickly view/change secrets

My AGE key is stored in Bitwarden Secret Manager

bws run -- sops localhost.sops.yml

Secret template

apiVersion: v1
kind: Secret
metadata:
  name: plaintext-editable-secret
type: Opaque
stringData:
  username: myUserName
  password: MySecretPassword123!
  database-url: postgresql://user:pass@db:5432/mydb