ac963f92f4
[RFC-0010] Introduce KMS provider decryption with service account
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-05-07 17:43:35 +01:00
3ac784dbc8
Update to Kubernetes 1.33.0 and Go 1.24.0
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-04-28 14:12:22 +03:00
a7e4927fed
Fix secret value showing up in logs
...
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-02-24 15:22:35 +00:00
49770ea4cc
Added decryption of patches and components.
...
Cleaned SOPS tests.
Signed-off-by: Yuriy <yuriy@vlasov.pro>
2024-12-04 10:06:19 +02:00
443c96a788
Fixed decryption in components.
...
Signed-off-by: Yuriy <yuriy@vlasov.pro>
2024-11-08 14:30:42 +02:00
937837b36e
Use SOPS DefaultDecryptionOrder
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2024-08-01 19:51:54 +03:00
a21e977cad
Update SOPS to v3.9.0
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2024-07-28 11:51:11 +03:00
1f8978085e
Tweak permissions on various created files
...
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-11-03 11:19:12 +01:00
b808e9e0c4
sops/pgp: drop fork of keysource implementation
...
As the forked code has been contributed upstream in a modified format.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-08-25 15:04:15 +02:00
1854a9f9dd
sops/azkv: drop fork of keysource implementation
...
As the forked code has been contributed upstream in a modified format.
We continue to inject our own default credentials in the key server if
none are provided by the Kustomization, to ensure we do not shell out
to `az`.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-08-25 15:04:14 +02:00
2e50f41755
sops/awskms: drop fork of keysource implementation
...
As the forked code has been contributed upstream in a modified format.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-08-25 15:04:13 +02:00
6c67d3811c
sops/age: drop fork of keysource implementation
...
As the forked code has been contributed upstream in a modified format.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-08-25 15:04:13 +02:00
815f3f0530
sops: move to `github.com/getsops/sops/v3`
...
This updates `go.mozilla.org/sops/v3` to the `v3.8.0-rc.1` release of
`github.com/getsops/sops/v3`.
This (finally) allows us to drop our forked key sources, as they have
now been contributed upstream in a slightly modified form which still
allows us to maintain control over the used credentials in isolation.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-08-25 15:04:12 +02:00
ae00400d12
api/docs: various nits and typos
...
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-03-31 17:23:46 +02:00
29d25a4dbe
Promote Kustomization API to v1
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-03-29 16:29:05 +03:00
7799bb0920
Refactor: Adopt Flux runtime conditions and status standards
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-14 14:22:53 +03:00
06ce60f7bf
Refactor: Extract decrytor to internal package
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-06 19:45:12 +03:00
Matheus Pimenta
Stefan Prodan
Yuriy
Hidde Beydals