feat: GPG => age

Already did it in my dotfiles.
Guide: onedr0p/cluster-template#153

.envrc

@@ -1,5 +1,5 @@
 #shellcheck disable=SC2148,SC2155
 export KUBECONFIG=$(expand_path ./provision/kubeconfig)
 export ANSIBLE_CONFIG=$(expand_path ./ansible.cfg)
-export GPG_TTY=$(tty)
+export SOPS_AGE_KEY_FILE=~/.config/sops/age/keys.txt
 use_flake

.sops.yaml

@@ -1,11 +1,16 @@
 ---
 creation_rules:
-  - path_regex: provision/.*\.sops\.ya?ml
+  - path_regex: provision/ansible/.*\.sops\.ya?ml
     unencrypted_regex: "^(kind)$"
-    pgp: >-
-      0F516E8261E8D4D03F62114EBD387FF7BC10AA9D
+    age: >-
+      age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3
+
   - path_regex: cluster/.*\.ya?ml
     encrypted_regex: "^(data|stringData)$"
-    pgp: >-
-      BE13BE8779CC7A53B2617A7EB59E605BE03ACB5F,
-      0F516E8261E8D4D03F62114EBD387FF7BC10AA9D
+    age: >-
+      age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3
+
+  - path_regex: terraform/terraform/.*\.sops\.ya?ml
+    unencrypted_regex: "^(kind)$"
+    age: >-
+      age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3

.taskfiles/flux.yml

@@ -32,3 +32,13 @@ tasks:
     cmds:
       - kubectl get all,cm,secret,ing -A
     silent: true
+  sops_decrypt:
+    desc: Decrypt all secret files
+    cmds:
+      - find ./cluster -type f -iname "*sops*" -exec sops --decrypt --in-place {} \;
+    silent: true
+  sops_encrypt:
+    desc: encrypt all secret files
+    cmds:
+      - find ./cluster -type f -iname "*sops*" -exec sops --encrypt --in-place {} \;
+    silent: true

cluster/apps/home/mosquitto/secret.sops.yaml

@@ -3,57 +3,28 @@ kind: Secret
 apiVersion: v1
 type: Opaque
 metadata:
-  name: mosquitto-config
-  namespace: home
+    name: mosquitto-config
+    namespace: home
 stringData:
-  mqtt.conf: ENC[AES256_GCM,data:KdS80l49KdkR18osF+NmONIbvwlj82JHgYDpBKzwHZcxgIJxvgO0y9V+Iu4d1MN5FOeY8Fmut7Zz22TY5piPmOff7p5v/OfduY5THvLh7k/sYc/VsETMRHsTM3YKXMQ=,iv:3Z3KfzNoqE/m91M7KMqnEXufsje340etPPLItxtMN+g=,tag:5E8LJnbKLBme/trrIo03Iw==,type:str]
-  mosquitto_pwd: ENC[AES256_GCM,data:+QQNLv+afQLzZJVgRqLvAwrsbjrl/GRwdOiypWqfFPv8dOGx6q/igu1wwBp/3q1EEunqf1lKrAWJpYxryAXMoZEkC3Fhw7XZ+PJ2O2YGUlnCo1KQj4GyReaQCuKAAoHfwk5+0P09/YWAJ3PJkslHRDsdIrV9lUcg,iv:pKSML3JGZ4zsP88NzFbZNjwrU9MPa/fFZVrIyrk/DUY=,tag:ZIPCvBHEGKVFiyl6CV9FDA==,type:str]
+    mqtt.conf: ENC[AES256_GCM,data:1OBsg+xsb3+nn96qYYzqcd3Y09iRqVWISonR3NqV1YlrWj3b0saF+ryAdYYZ0xBTVx6iBO6u/Th79C0xtP+5c3fbW/8PCFS6ybK/htLfsZDquz8pHC8s5A2VjkWgJKk=,iv:E+tHThS4ZuQsjA2HsVPrCDnLnqWrD52COFPrS7xI6WE=,tag:mgyMdJgnmKm8tn0O4qR0qw==,type:str]
+    mosquitto_pwd: ENC[AES256_GCM,data:84WxFlRsc2eAWLFB+bfFOOiq1WGVDCGw/f59L4ZMmmckrS2biZnXbcJiX3jITjm0k7RTMs0xa+FIso1blKtaZcSAi9cDyt2okPZET2IQiKa7LXnGj72H3SU8+MjH5+MEVGnkaIdcl+OGIflqZ+dcmYlznrdnyd5y,iv:bue06r9CV2SkUS6htzTBiuvbc7u/51yvR9eAOsvUPaY=,tag:1SQsYXiS9Y4V75uvNqOtWg==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  lastmodified: '2021-09-19T23:02:44Z'
-  mac: ENC[AES256_GCM,data:8ollfiYQ6gHtoMnKWt3jOsmh5nUobcNIS3opQ4IdBy0noTlQ1Vpm+6sxxggtHQJd/5v9E4pdzcg9ejqE6xwFnX/Znun7dYznXOpgLedY1mQhXUC89vPVRXl6APicS1iZj73ub6VDqvu2ivQ5sRliu/WDWQqaHfl2dXlRjIxfenQ=,iv:ob/38WUEasQfipdXxRSK4ztLZu6ZlP6wqrw3Upl6pag=,tag:FtL0KZgaLZY+/FG/0H34LQ==,type:str]
-  pgp:
-    - created_at: '2021-09-19T23:02:43Z'
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMA9JytBw6RLnDARAAvs535IJ/twLnwoK8e11bz6a+7u46l7ywG0dk1FGWjZw2
-        N/5BgqLBAUUWOTqyyuQhwc8m+/DzpoahbgYu8EKf/lBfu3v+fdKo+Vr4jDP2UAwv
-        PalU8F0a3EfIKwNi0psU2VcuwlFpgiFVq6RBZ5w7A/ZtEeQN1Y55Eym11Z+nc3eJ
-        Tij04SSO8lN2+fw+ZE1A3tsRoPrMNPOl8zx4Ou1UPhfRblLAtBOkc3gemjBEr+qm
-        OFa4XEQOo44l6XSNHD6pF0c79afyWsQeh7A8wONZSd4ru9/gC7RQt9EfvIC3BIet
-        KSuIIKnXDlJI6WD/6mxbaYIxE7fTV9AjNl2vAdOWvXXvYeBX4b7SvCTCV+PvGzBT
-        AWiAIiaXmm/YIMNII214FozCndZg9KrCjq96eFz5w0ZJP7Zj/54yyh68tp+yu5HX
-        aa7YeNobonXZVGZn/uxtHziB2Wo9AUyOEl7QQDobQxwonBNQTSNpZbeXYtErWz/2
-        RRnz+QcrlrdTQiDKTx7mPj0gVEfByYg+lr+WCKNmHwYtERRWuDgRqVf27GLKgG8d
-        n4y4yPGKcgUuXJWBLzcCa2r2M9H2nYuPYlDWtXxxpn6SpOmGTnFA9EKfmq+WTJ+T
-        ZwhsbiGjEBdc7+Fi4NvT5FwVNjwyjkF4C1iFh4qaP9tLRk1GHndjMRECsyRU0LjS
-        XgGM7NsAzCCuuSAEYhne9wFS0+fBRm0v2HMst/Ec721djlQoJLbvLdUcGhngXEXJ
-        PIxhs/uMawhTsXCSsswIW48I8/b+P4IimC3vvdLDRAjbYG7xwWMbgkLRQOTuN3I=
-        =smp2
-        -----END PGP MESSAGE-----
-      fp: BE13BE8779CC7A53B2617A7EB59E605BE03ACB5F
-    - created_at: '2021-09-19T23:02:43Z'
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMAyHd4YJTb9uqAQ//bt9aow4LvzFeeu9nB7BzIQMktjavUQM8Z2Hr7xe5dTRK
-        TTe/ll4cF/mzQwszpA0CktFgyoSxE48GTKDU5Cz5hOsvGWk1VDXdQZpQTX/cKomJ
-        Bkwhy+lgduC9EWGq2vw2WH8vV4qQv8qEyKQCu7+BVn32V1WCc9GaljgHvdR6ieZl
-        35Mv/2QQ1RBWQGemJsuSQSSFTl+K6CkDcOOl6h9VkEdRjslyxGF2FvR5DpXDGrxY
-        xqwDRdCtyvzMKyNhpaATWDpzOZ2CH6cdH+2lOFwvXWSctdjYeoER9YxdEc23m429
-        MzRQbQgr2u5I0m/r1ijNThg6UQjaRPky/e6xjwYoDABhF7uRQRy5Gs541RbRuyil
-        pUa7YYW5dS4yaLvx4BXm1NfmSNZXOpuqKrXBh2o8QWffiXZ6C5teqcoSzqfEA84l
-        xLFJ3tlzo7D+t/ital1R2geLRO1uJ05jdwduKsMrj9x8bw/YsMyKaFlFrQQHid1e
-        ognvDTpx2VnDO62XhvqRu9ffa/jVtqUwsCJk4J+QuEdcgBKnVlYaTwxqcbmQ+UQI
-        HdhbGjOFXg5niyPvmD40JtCsOokUQ+64jTV7nhJEXf9CT2qEJ6KRevaIODRwRQbi
-        yPOSxvFevbty14Anwwb0MuIbyN5liXIo/EOPkFB3AoqHKqpwweg4pzuZQ+jv0hLS
-        UQHtWsgMyEavdcAat9CfsURqM8gSytEc8XPcta0cBV17ZQnoc1qB0HUSU7Y9BEM3
-        knP1gnwFmXpzeComBW1cdW13mRPokECh4lG87KD5GxKfKg==
-        =6o6x
-        -----END PGP MESSAGE-----
-      fp: 0F516E8261E8D4D03F62114EBD387FF7BC10AA9D
-  encrypted_regex: ^(data|stringData)$
-  version: 3.5.0
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlT3NkZ0Y2VUhpMnJEWnZ5
+            Nm0yR3dHL25LSjlSNFlpRzQzeVhkQ2hLZndFCnJQZDN6Q2hOYVBkc01mUTI1UDJS
+            UlVJeFc3U1gyN2JiSlMvSTAzVDduRkkKLS0tIDVPUGQxeUZ2U092aE9yVG9RbTZr
+            SXBobE9Cdm1kc0RJSndjcHUwYWhUcXcKCMNcwQnBstmXtrCWrP7dGynVNyARwMzN
+            moz8nQscp4/h1KnDkSDcKmivQLNTkbiVUI8ILCGXhIi3RuXutye1Nw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-01-18T03:28:31Z"
+    mac: ENC[AES256_GCM,data:Mkael4W2fSPSG5V4Vf+lWNU0rDGd4POF5RmExpnIaqx1ndVSN0VxOeGVy1sA7jEl4ea17xDMopIDbH0j8cRr7c/HKCGC4MiXzZy8pXo5UJULSkTaqSNGRekJh0ZKm25XWhtPK7LK3z3FYpsLKfHBt04606KBNqVYYZjvd1Jspc8=,iv:XbaqQKkzURtnkTzg9yNr3I5QfFApdbOICWshymT6Z00=,tag:7wZz8r/PLa40UNSrlxqOZA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

cluster/apps/networking/cloudflare-dyndns/secrets.sops.yaml

@@ -1,61 +1,32 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: do-token
-  namespace: networking
+    name: do-token
+    namespace: networking
 type: Opaque
 # Base64 Encoded
 stringData:
-  ZONE_ID: ENC[AES256_GCM,data:IW9WQvRoh5nq8Q1WKcDuN+3qAtu5MrnuNT/JTuGxTZQG,iv:kklWYDRncX0vbwDzgVsmdnq76xPe1rV8WO16YoNvvQU=,tag:OvvXtEA4miNHAVAhLIo7eQ==,type:str]
-  RECORD_ID: ENC[AES256_GCM,data:4ohGkih1BHgrWILEDQZNIoVfe1I4ztQT+g/Dzq+TEwE=,iv:Y+jT13SA5C+FU9cw/PnW8NNIivCHbGSXAHqOoPwR8Do=,tag:ePa+DfWDXaYFE96ZXyrZCQ==,type:str]
-  AUTH_KEY: ENC[AES256_GCM,data:0+a/K3bVyVosBU6RD6XayMFhotQu9enhcUhburoB/7injAtLjaowKA==,iv:ZkV1C1uT0muXrx0mqRVZYcbqz2x3ZOF6NgjsXQ0Rt8Q=,tag:nAWUbB4ioosfynYiER1cGg==,type:str]
-  NAME: ENC[AES256_GCM,data:cI7ElfsIEXAnhXfqdIM=,iv:yG+ML6XG7K6ftQmC+aIFkDUf/fxzLv8f+Kule5r9LNI=,tag:coNwMgY8tfbupDB4e92GdQ==,type:str]
+    ZONE_ID: ENC[AES256_GCM,data:QAfRivuZCtY1xyjgHkT26Ygz4EOhDTNZaxcUpXkkAG4B,iv:VJiAzNDNhiSPfomjeeNFDrYEUdJzxja48bll3JEy4xs=,tag:uo6cATWq580SVSC2aP7kRw==,type:str]
+    RECORD_ID: ENC[AES256_GCM,data:VPZxMPRg1V5V3Ni1Y7Hms7IwGbE4Gaqm9EZNAK/BtjA=,iv:QTQgkbaabyAwjQDbmuyqkBbVPxLIMlOuy9IZ3vRZDTg=,tag:YY6+W7kUQUDM7KosC2lqgQ==,type:str]
+    AUTH_KEY: ENC[AES256_GCM,data:8cM1VsWUDb5iRcdg8hJ6c0VVRS8geeuDQZP9xAne/eChq6AYDk5C0A==,iv:V9ulxHCYcJfbk3rsi5/K6Cbo0JKj90IfgVX1k+8S0KU=,tag:WiKX/+AjbRjULPOYjNud1A==,type:str]
+    NAME: ENC[AES256_GCM,data:C9kyf9u0qtnvD0OGkyw=,iv:7GRNDbyd9VKqa2yDoqp9ajsEh19u3bExSM0oJWMGoCI=,tag:oeqqgIWEoyS6npQrcyOD8A==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  lastmodified: '2021-08-14T00:56:18Z'
-  mac: ENC[AES256_GCM,data:bpZBtNW8ryJRboGDrljIlI7aBMgMFnghjmtTTxyRhxpiKfhe7g1ptlkDi2UM2MdkKPs5uOW7d/cuwHFOee0MD3KjYL+ZqxfvKnSyOXmVhfMqO19hvlkO3maqTKABrlisFYY+HCG892rAWmgMEM2M5kPBZeNYy7TCvH+8S5PD4vY=,iv:iQ549HLEWkQwqgrEUvPgvr3L4VsIRVZtVuexGkwgBj4=,tag:M5TMJoSF8SDNxeYUzpFN1g==,type:str]
-  pgp:
-    - created_at: '2021-08-14T00:56:18Z'
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMA9JytBw6RLnDAQ//b0YiAZNN4ApWW4UH4a9WZRD+G+xYt3FRcD4znQdyDRPV
-        VfkM2LfQ5KePeAZ/kvk+Zytuxxa6/hPJkvGjIYCtRXIhSNn+MN7srlrdr4K43UN0
-        1NG1sF8ghK1RyNRLSDlPLANn02yxQGSBihESiFnB/xz0xY2PtLF+pbDYmguKkebm
-        C9vTiBdKu7qMN+M+XAFU6A3m7Y7BhC/64ZYeQeyA3NhT2UVIhzMOs0qXwTxirS63
-        Q1mr1X5EezW3pSqGCarS/nNFST/ZXJIOpIiSkHblwgiBEVdtYCYYpR+y3fVY0Xlu
-        GEejqrCdiFzgm8aKxu/X0nsMq6FmNLvYh/Nqq0FEQr8k15vbf1AFPH2A+z5+XPGB
-        nNQSJlKpmkvM3T+EzmfPrvKTlE6XHkOpbH+G6kyroPbOLLsTFiOpVvxfm0lmKvN+
-        wys5AfjXd9gm28z/LIUU5dqabKLzz9QMCqeInA+Ma3tdT/y66pOrrs4xNB+/gvuP
-        4UcA7NeI8sAbSFllnpT0WfP99vRWkJJgjTERTgs8oekr8Si0prPrfGxQdmdLEu7p
-        k8XgFqGfN9i6aIesH08qjNMpiofuAE2ng5/ErZCq+Mmq0jI5G0YadLXmWBF4E64D
-        hbsEXJhvzV/OHhW5iT5Y4ErAN86Ek05KFHa4DmRhaYCBgrEPlVJ7BBGYPMoGXFXS
-        XAHp9yPCgIPutDoh1sZ4hwRp4aPlnvonBTEujEEgDS9LqKuCtzfDSEmchpfcWkUX
-        sb7K+zlcC0hxYWTuzNczPQPE8rTkLMDMYykgST2SAB5pHkjlf38havpSIQbi
-        =ryeX
-        -----END PGP MESSAGE-----
-      fp: BE13BE8779CC7A53B2617A7EB59E605BE03ACB5F
-    - created_at: '2021-08-14T00:56:18Z'
-      enc: |
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMAyHd4YJTb9uqAQ//XB8tCEP3w/3oZp9wVYjBoGlIi3MZ+mgcluALNfdT8fag
-        2g4dy/pka7ogv6WPiA9yZ5ifv6v/7M/nDoOycXG2zV/u14w9qKRTI1bNjwCdGjmp
-        ovvEcw+/3pSizYWgly1r4/JRb8mvzSn0bHu10Tj8hEs2weYs3wKGIW2YC6WPCmZW
-        ixEF93nJtz7i8luq8Xhe7VnTauc0QMXqK9dd4Ky/X9Ly72P/FMMi82fEhszlDTCN
-        EIeWv2vdyJokWQCTc5aWpBYBGTtZjCAT4dwvLkiNYzxQWTZjJPzVEtbOZjslfW5T
-        KZhCQL2fKVzo6Eml39oJtGvkodtGnUImmlbuCZ66rTWKKCgjTizhlnlEi1xCv7+P
-        MdpfBDE3EyU0fMDm6Y3C48oEZ19BhuAC9gdKqBHi1nbmewSqDHtvfCUobb4MpP78
-        qMZ/6ygBewUQVoiGJpES6LDu9K4e/Gi7CJ/AZTr3TNNZ24Df5MB3kCdpjC+BPeWb
-        F7F3NDzg4vG/Rsrp16wEerePmwHLmqLVxHZQeb+fh1JZL1Xo61yVKHkUz6Rq2v/Y
-        FxH60tvqpTrDO8Z0qQJzmqvuXWQq3GyCn/1z7wyBtrLAA2YEwrMCmen3f1+wzaYf
-        xQOz7B6CPnUib+Ch0d8MPTrRdodNFMDB/BjXue3+6Su9/3qVWU0hdADvKcC4qFbS
-        UQHCbKZpnQHbaDoW1YRTQI6FnS0zpuXy69sI85r2KrZFUAVp+VhN8zvUXRE3sCYp
-        RochPEdDJrYE8gvSvvbicmN5oWrPqly/Sp7+xSDNGKYy3w==
-        =KVj2
-        -----END PGP MESSAGE-----
-      fp: 0F516E8261E8D4D03F62114EBD387FF7BC10AA9D
-  encrypted_regex: ^(data|stringData)$
-  version: 3.5.0
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMk9hcndGUElSM3o2eFBu
+            cUI4N2czN0I5OGNiMUdzNGREaWxGVmx3b2h3CnQzRUR4QS9zN0J5Z2NTVFZtcWNq
+            aklFMDRMY2pxcXBpVE5vMWxzOTZUL2sKLS0tIFJZaFZHeG56OFM4UldFQ3N0RzNm
+            SHJ3UUg0bFlXdlR5N2EvSkpsWGpZcFUKE9EWA30uicI+Ao2VF2XuOPqvzdXKgTG8
+            u+txg6w3PL+B+VGaADe4GTkfQhwddlJ5/Hv4k7y0ffiN5MeHVZT3hg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-01-18T03:28:31Z"
+    mac: ENC[AES256_GCM,data:sgQDX3u+J40UpNVLvrZkydm5+sh9mFeFVgKpN21YffnKf1mA6O8TXxJ0jDKMr/SgnxXim678GFXVR4SFwtmwHvCXboDJUCZMstIC2sJsFqIf2i/BGYRhYP2wsNCcf9AhFdhK+wRw6o4YcLpOt6jaSGjzFI32X5yKmLy3ygDJJoI=,iv:ZDAZ4JBYD4B2SBg8lJM0Qb+Q5d2hf82D+s3evdp20jM=,tag:CPx9OgGwBViuvzSTFoRiyw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

cluster/apps/networking/tailscale-relay/secrets.sops.yaml

@@ -5,55 +5,24 @@ metadata:
     name: tailscale-token-secret
     namespace: networking
 stringData:
-    tailscale-token: ENC[AES256_GCM,data:hXhSYs+bjnGefs+6gdXCF6O9ihNDBDwN+QMmT6kdbA8TnBL0frM2POk=,iv:v+dbt75AkYx4vVrYPssKHF7ZV/Iz4ey23V3eh7dZi1Y=,tag:1ZRGlNOR0ihT11YRapvbtQ==,type:str]
+    tailscale-token: ENC[AES256_GCM,data:Q/HtxybNd4Sk6czCIgPWS03iF6ITYuLcnv56E/7tIQH2vnXAlSPG6Hg=,iv:6X6Fbej6r4h9+joqARKBO/QqSMEvCfKRACqvVrA6je4=,tag:IZhGhLxGAPAU/INyIze9EA==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    age: []
-    lastmodified: "2021-12-06T02:32:10Z"
-    mac: ENC[AES256_GCM,data:zUpANpHqr2u+mFd8NzrdJ+6yKCSBgJGan5ap4nLcYdpR3GiipygYSQLSoz14xLcwtMLjhhztuLITfPkeqviTAy/R2HIvGTgHIoLpzPhhOjvncGT2VHZpQivNm+ufejshpGOckGA0UkDqCb2UVgB/c+2mToxudUAe+eNubywZC8I=,iv:DnbPtEJG887Z754Xv2SRdo1679PgA6+og3PIFfvXIAk=,tag:NdEPNBFEv8//PfxaWqA4PA==,type:str]
-    pgp:
-        - created_at: "2021-12-06T02:32:10Z"
+    age:
+        - recipient: age1aryyzdumg5vg5pzy26vxffgjmckz3yqj33juffls3rhkcgeaxv5qumdcr3
           enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA9JytBw6RLnDARAAomDlOob/Qj2BCY0TjHl3TU1FxBinuF3sf0Ngbpd8dW4L
-            V7UA9TeI+vZGfpyJLFxLV/WxNkU1T02BPcRaECHgolrG60ARNMaOBV3lEdK6jDU3
-            /o4iBBt+tQSMaonshi7jkvoQNjoElAfBu6r14u32aMUVF6RSMgdoxWy5ba7p/9Sg
-            FU4ociTwYjqYtaFXDGC33oFayFWtPse1M5EH6fcW7RQLX1RQDPTZv4o7zKnJ06X0
-            EQc7PWAy3/EssECvRIb13NRzlo8F8tOlfiklvSP/r/oSvRjdf3sO5nub16RRRUzP
-            ZBs2f9gwEc1w6XJDkWwVXgfymstUSN9rJPrWDhAbwki8IKpjo5+q49D15tan6X2w
-            WFS8GDdhuY7jr4wctOt9JcJbEuxnr0ru4TKN6Vpgnz16lc/P70k6XakA6edFChzT
-            NjZDtUtf7eXOTNlKdxwJGuReS4+zNeR8qB5WRGZwAJWNItw3MV/nUB75Ayu4gYTX
-            VSXbfIdmzkNJWCmXgG0sBrNCHvz1utmkN8gk1gIcIt8+ivy2kXdRfkrAClKFsUop
-            XU000xr+F9i7gKSV7Ny0ZXn4itCwY3u0l09sa7Yb5z7vMUI3VpF9idjP+myvQBQv
-            qWo2EkxXmfbcncsFKSp0h2nly0r1OQJctOLij1g1j5RfULmhP3Unaan/jzLc1kzS
-            XgFI9kzFNYShzjNVQ0a0uyaYO0CvL8A2REd6OcGP94wWjRyh7c/OejQhOkOuqHRO
-            PaJEgQKIED6A+xwRYiyWZqs8CDs1VcBVy+CHsnECD+IiOgwi5CulnbZGHFMrCFk=
-            =NnXR
-            -----END PGP MESSAGE-----
-          fp: BE13BE8779CC7A53B2617A7EB59E605BE03ACB5F
-        - created_at: "2021-12-06T02:32:10Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAyHd4YJTb9uqARAA11iGbG8u/1h9E7/Tw5JzvXnwwwliQajtS7bgKGxcO3bj
-            jZBBT7z0sU03sIF3OKW/dT+ddfXL7+pRyJwBOmRWF0lbIOAS4yy8HUdNHtjeZFL1
-            nFrz6OdhGGTvtijj5vBpX60M8MXNWBH8d672Ygo9mNYQGv85ta2woHrJRSPRYNTC
-            +Wg52r+L2ebtF0zB9DQFszCrSP8JKtkAGKg7bC430stlXDALClZ6njnE9UisZLyv
-            kXSVtUjxR3kjhlEh7Reun0puLFLoPMgjOquiYXj6OiJ+yi8V7Aoizdlug4cKzRQ2
-            T+Gh9iKxP+iFFvUyWqn38RcIrKXJQPKG7AUCSiQmpb9C/pP5kA/ozqRgXKsFlZIA
-            Me1IXObq70IaoHWJ6b1y4jnuly+hlPTXdaeJJvGUgnDvsO2mIKLApnYHuiuIe7IX
-            c/XtcJHRwEGY9NLMWro3ryfO6CfSmzNrEaCBm0JC4jLu07Z+9tG1v/29VzWDDmYo
-            PeHUMNsY7uqs7p/u5krILqoy/jsx65RoDnpHB9dSe8giSaQcUyZ6CX1MgiPNdx4W
-            YFYbmtD7pvMlw0l4RgNDJO5mFN5Qd9PEjPQFTv3SYYBvF6A7eORxHtNmLQ+t/PIu
-            MSX2+Gl0vpuE3Hu8GKeUdHuqE0oe7nhOiSeJTOFYWegb7o2FeOiYB6EX40j/mi7S
-            UQGgemDesCqSBsCdppc6EKggGpbgzNZWMdL+ScmWsn3c8ZmyoJ4aPl2F0XaT7bu2
-            zP9nR6wOBtSsU/lcYxheby+nkqGF8Cd5k4nvA6CsRdNh3Q==
-            =82pE
-            -----END PGP MESSAGE-----
-          fp: 0F516E8261E8D4D03F62114EBD387FF7BC10AA9D
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcitxOFZzckV5MWJSd25p
+            TVNUdTZVbU9JRWNpQUdBUU1SWFBGZXdXN2tVCmlUbXlXMWxTQnJKZ3FPeVFsUXFE
+            M3FZNHZFdThEcWZLWCtOUTBmdytiOWsKLS0tIGoxbE8zcEZCV2pwbElqb1VSNHpt
+            RHhCTXArakZEK1JmWVdMQ0doQTE1RTgKGTXeC0+jSyPQ1yz5MhuxGEXwpTXzbyR7
+            iHoPyBQnuWZELXEzH+oW8v2qRIblro9hWI8QRjyBaTx8bP8awD9snQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-01-18T03:28:31Z"
+    mac: ENC[AES256_GCM,data:OFTRB7Xwi6aE9vZ3nVnZJDkB/6zdBf0oN9a+fT+lyedZs3cviPl+3SYQMZx42ZVaw+9zo5LJ17M0LLtKYDzImgZJ7lwTCIv/lnjD+MTXLHcb8BijNCSwRMWlq+6pXwyjdpvPKnyJ6DzQoH7HutgluJy5QrzsCB/SUpmf5sw1dzI=,iv:rEVZXp/okWc63ZbUb8GzoVNeVVi9ScrUZL2pC5+9bw4=,tag:XehDRbPgx+wJErvG5YI6gQ==,type:str]
+    pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.1

cluster/apps/vpn/vpn-gateway/kustomization.yaml

@@ -2,5 +2,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - secret.yaml
+  - secrets.sops.yaml
   - helm-release.yaml