sops pre-commit

.pre-commit-config.yaml

@@ -27,3 +27,7 @@ repos:
   hooks:
   - id: shellcheck
     args: [--severity=error]
+- repo: https://github.com/k8s-at-home/sops-pre-commit
+  rev: v1.0.0
+  hooks:
+  - id: sops-encrypted-check

secrets/data/pgbackups-config.yaml

@@ -4,8 +4,36 @@ metadata:
   name: pgbackups-config
   namespace: data
 data:
-  POSTGRES_HOST: cG9zdGdyZXNxbA==
+  POSTGRES_HOST: ENC[AES256_GCM,data:Uw1fDmdY4cwi1GFuhaZvDA==,iv:yLdZsPrwZjUu40IG0O76Jv22SPet9+17v+E03YsuIZ0=,tag:TJPM0Bt8YGVX21k/q+RSUg==,type:str]
-  POSTGRES_DB: YXV0aGVsaWEsYml0d2FyZGVuLGZyZXNocnNzLGdpdGVhLGhhc3MsaGVhbHRoY2hlY2tzLGpvcGxpbixseWNoZWUscG9zdGdyZXMscmVjaXBlcyxzaGFycnksdmlrdW5qYSx3YWxsYWJhZw==
+  POSTGRES_DB: ENC[AES256_GCM,data:QdW54HzfMukWlTg7ZxXuXJthPMpurNOxTeJL3TmDssNJ426Mh2CTT45jy99LZXiBz98LSRlmuP8K0oP6gxUrN9vRr/qJkvYn9WpqdlFcqCUCkDZTP0A2fWUdMpIHvuUu53KKZcUtK2gGi9soLmaHZymaeAMLiDTy2egZhes1KVjo2LhcsZix32yzhgtz9ZO5,iv:lLU7y4/Q2BjyHz951jy9FsPDwbXxheo3Mx2iARQOWU8=,tag:GNFs3S3ZGey6V3U6l3dPsQ==,type:str]
-  POSTGRES_USER: cG9zdGdyZXM=
+  POSTGRES_USER: ENC[AES256_GCM,data:gdvvTTFsZL75IrfG,iv:M8uEwJVJSmlWKjmruxkRtLkJa9GuK5wrTwtW3lPdAfg=,tag:HM8YX1z3bzfvH2xt4LkvEA==,type:str]
-  POSTGRES_PASSWORD: ZTRUTmFHdTR3UWI2cW8=
+  POSTGRES_PASSWORD: ENC[AES256_GCM,data:mI0+152bHeI7XrDBXbKKjQBXwGE=,iv:mSn8OH3Fl9S2UW9YrJwZ8imkWNFAIexwU5WqGhTUu1k=,tag:Dbg0s+Qcfa1FHbC4hh0f9Q==,type:str]
 type: Opaque
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  lastmodified: "2021-04-13T08:24:50Z"
+  mac: ENC[AES256_GCM,data:uf0G3w940jSrS2bDhN+65iNm4Wz9yDwgyqrzepV8E+GgVNhJl6O65xlKu6CAOAmPTA04kGPrgFH+irAqRRzJ2yVrw2sQ3iwA2TB+SlfmQ29Ev8NDm4yzxlwqMoQKs+Ulz1zJNSv1NBtpcoxMwJkpc9ZVwVrIvPcsDnjBuRQyEdY=,iv:QL+iHjlsID3UdJ9cDrvi7RnFxmcLcGZ0UhyNSKi9eog=,tag:wteC4eGSh0L8bchG5+6MOQ==,type:str]
+  pgp:
+    - created_at: "2021-04-13T08:24:50Z"
+      enc: |
+        -----BEGIN PGP MESSAGE-----
+
+        hQGMA/JorPHm1g9XAQv/S+S2X9dcH/hFTQy+Dw/bUcEgu/vJ/0oID55SFmbYiETx
+        l7K4DXLcUE6Cjc33YhNif7xlYS40wPkLLi/mNzY5BF1uaWdjNS+0VQn/XSE24UL0
+        Ti+AsVJA2mA+iIcuOTmeH+f7b3Jhi8WG9vLxEjaeL9Jcv2yz9B7Ey/j7VpKjI3WW
+        lzdGjNiydqGudXSQ++iuZG+PMjquaEnMWIjZOpMmTazdyeoCpHcDxTKsLY8B5Yun
+        4YUPCoVvxUeGcmPO3rNQj1FHP/AXkudsq/kwMp4JaSTxwRJ8NjJD4+z40X4WSp3K
+        UmUAvWo8WEL/9OCzfZY3d2mkHiaVhMw08sZ7k4huuP6o6meAIuR83EDLe+5SSesI
+        teBkuhYp3uK+pfdXq7Vgpl3+SUyYq1LICtwQPJ3qYI7IQafxbhUXANp85tFwHLY0
+        UilLaYTotwHcFMA4EKsond04W+B9cfTkMnhtag2TM6HQD31hhxIJ/1ZswyyenVEt
+        RRHHUk/j7cHmDIokLuKL0l4BLhfIqLw+Y922fnoWJEV/qFbbSk3qXIypbuVqeCYM
+        rH8S04nB3DMCxrLBSBQ7yz/Jh/6fS7FxPKPyk1GKKsWIDw73GBBXAPU6bcvN9toV
+        g1GOvdf6Gm+/ovQnNS7s
+        =zMpS
+        -----END PGP MESSAGE-----
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+  encrypted_regex: ^(data|stringData)$
+  version: 3.6.1