.sops.yaml

---
creation_rules:
  - path_regex: (kubernetes|global|clusters|manifests|talos)/.*\.sops\.ya?ml
    encrypted_regex: '((?i)(pass|secret($|[^N])|key|token|^data$|^stringData))'
    age: >-
      age12kzuwvvedndehkke84apwamungqrcavf2khwjvd46f6lkq0wqq5q3s3vth

  - path_regex: infrastructure/.*\.sops\.ya?ml
    age: >-
      age12kzuwvvedndehkke84apwamungqrcavf2khwjvd46f6lkq0wqq5q3s3vth

  - path_regex: kubernetes/.*\.sops\.toml
    age: >-
      age12kzuwvvedndehkke84apwamungqrcavf2khwjvd46f6lkq0wqq5q3s3vth

  - path_regex: kubernetes/.*\.sops\.json
    age: >-
      age12kzuwvvedndehkke84apwamungqrcavf2khwjvd46f6lkq0wqq5q3s3vth