feat: use age for terraform and ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>
onedr0p · Nov 24, 2021 · d1e4dda · d1e4dda
1 parent 1725cee
commit d1e4dda
Show file tree

Hide file tree

Showing 14 changed files with 173 additions and 544 deletions.
diff --git a/.envrc b/.envrc
@@ -1,5 +1,6 @@
 #shellcheck disable=SC2148,SC2155
 export KUBECONFIG=$(expand_path ./kubeconfig)
 export ANSIBLE_CONFIG=$(expand_path ./ansible.cfg)
-export ANSIBLE_HOST_KEY_CHECKING=False
+export ANSIBLE_HOST_KEY_CHECKING="False"
 export GPG_TTY=$(tty)
+export SOPS_AGE_KEY_FILE=$(expand_path ~/.config/sops/age/keys.txt)
diff --git a/.sops.yaml b/.sops.yaml
@@ -1,15 +1,15 @@
 ---
 creation_rules:
+
   - path_regex: provision/.*\.sops\.ya?ml
     unencrypted_regex: "^(kind)$"
-    # yubi, macbook, termux
-    pgp: >-
-      BE499A77C4D97AAE65129464E2E3D4B1C264D49F,
-      554154FFF783DE317FCDA0EC77149AC618D714D6,
-      4B675CE4CC642516AA9AE1DAA88A97FA2C009E2D
+    # mac
+    age: >-
+      age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta
+
   - path_regex: cluster/.*\.ya?ml
     encrypted_regex: "^(data|stringData)$"
-    # flux, yubi, macbook, termux
+    # flux, yubi, mac, termux
     pgp: >-
       673F9E296113BAE74D9954A2A92853A46EA01574,
       BE499A77C4D97AAE65129464E2E3D4B1C264D49F,

diff --git a/provision/ansible/inventory/home/group_vars/master/k3s-etcd-snapshots.sops.yml b/provision/ansible/inventory/home/group_vars/master/k3s-etcd-snapshots.sops.yml
@@ -1,54 +1,23 @@
 kind: Secret
-etcd_s3_access_key: ENC[AES256_GCM,data:iIhPsfUhBMqfYKhUeax0haFtTPo=,iv:lWZg6u0nSvne9IqG4WIHIQV871EQfNurLvWqeAZ8Qw4=,tag:Ezy9OgoTwf/gJQtzqh4Zyw==,type:str]
-etcd_s3_secret_key: ENC[AES256_GCM,data:KEggbL1y4UL/z6UMSLUliLVNSJ012DiPzAFbH+INg3jczcyxGl51YA==,iv:1lQLO6yVb/ub7ku75xQzRcVnAKzLQ6oi8KBrPy06g9g=,tag:hQcB6zwL4A8vOJO1mmXMkA==,type:str]
+etcd_s3_access_key: ENC[AES256_GCM,data:XNX9rmb02uItbnkw84NTNLSSxVQ=,iv:XeH1Q+1eafniI/Ix31Pxver0no2dV2f2uEu4g4xlSQc=,tag:hys17SrIFXj69VLEnIUeOg==,type:str]
+etcd_s3_secret_key: ENC[AES256_GCM,data:7PkVDIBIRkNZBT/43yBJqfW3bwNDaIPFzROwn77N10FCp7cEi6CjOQ==,iv:fDlZXO/+qSprMCAtqR+YL0KDb/HduGuq+Guhhrmugm8=,tag:k0aK1nd5v9X6KcFRRY+R/g==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    age: []
-    lastmodified: "2021-11-12T17:21:21Z"
-    mac: ENC[AES256_GCM,data:p+ufSkCgbQFS30mO/UKSkRmU2eX+SNYUUDDjOJkQQc3+seQjpPLbrYQuBGax7IGf1old40B6CEfL95nGc7tsT+eEGhJ3t2wApxPehHQBELLaxLVPlxO62rfnCVLRD5uhzuZvVSbyLFYi9g4ZAEw/b3YlNCrFrPRF0krpeTOYVMo=,iv:yQdWChI22QwU9K/0dOjbMaXQansDqiNK0caXD0t2rGM=,tag:xDUcN9+ZCdEt1MxLxkWwQw==,type:str]
-    pgp:
-        - created_at: "2021-09-06T11:59:53Z"
+    age:
+        - recipient: age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta
           enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA6zq3fPF3WITAQ/+MSr2vtSrdLeJB7537dyWMObHxlLOiMkcjPJ1mBBcGlKy
-            8HzWMYpdIZR4NavGcNN6bOYRn3UK/40jGFOlmC6URr26N9OPomjrXicQSHBKs+Tj
-            5pWisC2domudsARtzPg6CkzaQql6ST3snfEfhK130Ghw0usll21lWJoPzebekNVq
-            vff+JY1sk21P5st6srA+FdvrMCF5Pf0tTlRU1Spb05BUjde5TAyimi5uhBrOtOML
-            g+GRkryghnh5MrIfW1bM3oMaIgmr3dIwpAC9siw9luELUauwVal6MdbSK14lNS9w
-            50J9Iu5qpSAhYs8evV3KP0PQMCwu1yDKZAHKuFMyCh5P635ssffve+appnOQwUDU
-            DqcMdPifmivlS8J7HVQCkU28WDexxsxfAx8MR80UGwgQKIGKs+eUe1k5j7jyrYjy
-            kSjwizesM6Q2EmymUJOX7eiIsCcaAocmPzixjU1cj2S3iwMuEAJRUAZ16a83KJL0
-            tGao57OHHW1l/qjRc12uoeC5aWYU28L2yMKLih5CXaNRihIW71RJSqYdHj8q6TnX
-            2VOEN2nGxSmxyB1QnREslwZiR3LAMsWEpRDi2gXLtCFMrH2Xj/YI3nFVN6WIXpjk
-            f2KaaKM3W1PCCrVxjXOB4QHFVb84LwiI1TxpJvA/7cGjHyXejMHM1e07Py+O0b/S
-            XgFAgqSc2IYDxaWdJhJSz+q9oy5MOW1JwHFL0ML30I43kjJN4aFGal1tWL5L1Lk1
-            vUuXiITeujX02PgZvTwkWJvdwsJAKy9DfAh/b3qStTuQBWt/Q0Y5gjqVx70IG1k=
-            =V5eK
-            -----END PGP MESSAGE-----
-          fp: 554154FFF783DE317FCDA0EC77149AC618D714D6
-        - created_at: "2021-09-06T11:59:53Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy9oM+0P010UARAAh7OkAyQblulWh/8OM4Bc2aWnYLzclHhKkfd0MeDgy3FS
-            vu5BJC5aHCIZa7y0vOUEU0tg1ItAhQOBgdvGLyxamGzkHn82rkorBjuA4LXo0qnB
-            yrLxqZM5DZ4wEjexbBjR/9VQkk7hyYXFzD+QrRWb8eRBSfhG3RwH9LSrZFvuOHpA
-            b1dqaAl+70Hgle1DkEKY5Jl7g6eMaoqswuTZe/8MM6qfCVwlujNt7Ub/lVBA42gY
-            eWOsQSEDCbvHc426O0V8XcWSrADWsCd0796Z6N/Ohmik2jJT9vq+hUXjhUQpyTzm
-            1plWShDlXFz69/F0JbjYUqUvAg3lrPdwH63u6FMAsmvKQw0QdMpMelq6PUCzAemq
-            hfDFQJqeBcAKONkOMysNhlgswSmhhBa6g0UTh5aCPMR1O2x+hK3LZuP3Q7LcczxL
-            OhhgYxfdPL+Eg9bdZfzLJKp2LpWOWVe1pXQEp0/tKkVoxLDqekwj6Bb63rePJ0Vq
-            m+LjfHYmm52CXcsQIK/YvM7nEfdgdq8gOE4j7UX5rkVJtJPxWm4MNfwNFI4tgIPC
-            x6hdFhT6kIEoT6WhZw7UcVYsTxcGqUtZXAI+kXJ0O5x4cz1daJPNXJ879WMRO/Rf
-            aNH4lZFQYw3tkqSbTjSez0xrNex4UUGkHmHmvTvWqtPGU3epVOEDZZrLPiTVpynS
-            XgGyysOvZoAIHs1Ulse0K2Jz7skh7EOInu5uVgpDi3EltHSwY/5CWqEFn6bONxdx
-            nkVZj2qmFvfa0yf85KXt4uRC2Hy6YnvctK4g9uiGTQX3Triwj+GI2f65ZIvStWI=
-            =DV8F
-            -----END PGP MESSAGE-----
-          fp: 4B675CE4CC642516AA9AE1DAA88A97FA2C009E2D
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArckJpVWduZ0EyNU1mM1VH
+            L1lWa3QyTzR6WEdhMlhtckVLZ3dXa2p1YVNRClp1cnUzSFpuTVZwUm5qVXVFRGV1
+            VzAxUGd1WE5kelJPUUFrNnZJSnczdmsKLS0tIGVzeGVkR2ZNT1pla2dDc2FTS1F4
+            a0xEcHZlZDdXYURoQldPMVY2SEdWNW8Kh3PCrb2J6MEM2uHoyYQZKxd2Fu1qe6oG
+            mqmMxjk/bu27soEMqCGL/SXiJxU4NYty4RvxW7R+UYdV9/erqojmFw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-11-24T15:57:17Z"
+    mac: ENC[AES256_GCM,data:ObJA9WfAQMHWWNJGgq4N05i8biXCfmXcAwJ688hQgEhZj0Qg5EO0uCpiZKoRAD8I5xWZdRUVgfNohNPUn5f3V7SBT0Szv/YlDrb+xv5nybGLDGyugAPzd9YbdsrYLz2nCrKRbfsx6Nq2dtCc+6cEPftLfE68XVY692ckcwUyzdE=,iv:WtZ4o8saZD1QNiH+RaDQFNAeacDbYyofm65NngC+2FQ=,tag:wXgrBuMMSc9VnOS4P7ol3w==,type:str]
+    pgp: []
     unencrypted_regex: ^(kind)$
     version: 3.7.1
diff --git a/provision/ansible/inventory/home/host_vars/expanse.sops.yml b/provision/ansible/inventory/home/host_vars/expanse.sops.yml
@@ -1,53 +1,22 @@
 kind: Secret
-ansible_become_pass: ENC[AES256_GCM,data:dstgQrVDsnjAaL9Wug==,iv:CtUSa4o8EmgmsIx13GUnMY+KAm4T7JgHZ8z/Sprt+0E=,tag:i7SUqK/CQ9nyLzreTyQ/Fg==,type:str]
+ansible_become_pass: ENC[AES256_GCM,data:UypvZ4qmX21prXG0Mw==,iv:8hrQ95vPTEgv03Ic/olbSsuWZr2wvxNOgQB3yYXXsyM=,tag:c8ll4BcA7v/h9KUdepNWgQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    age: []
-    lastmodified: "2021-07-26T01:56:22Z"
-    mac: ENC[AES256_GCM,data:fhGUl8UGWv4xkikBFPivDlni5Cr0QjISncHzG746DF+1q+gL63do/K9Xfwmn2HDDIF7fyQN98mzV7ud86FC6raZo8sAmfwZOslk9kxRgaqWJMjk3Iv7FYOTj4xFSSGU09eFJ5DFL80Sx9gVo0FVosHNnt+VTlp7KmgwdH58Bh8Q=,iv:eb4IT4fg5wZkj69h8zXJ4QTCH21e5xidRhSZBP6dFoE=,tag:NlsyjeoUDM4xiINPhFuDYg==,type:str]
-    pgp:
-        - created_at: "2021-07-26T01:56:21Z"
+    age:
+        - recipient: age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta
           enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA6zq3fPF3WITARAAidcH2nO/1f22JyGv6VVevoBGpTG5fCe2QDC6ZpuDaKIp
-            hUjpXUFQ8z9R0IRLLou/t8Do3U5BAxv1fHGgUiJxb61SRSuPCUFlIO0bB8gLC/mv
-            g2DvdsQOLDmkkqCDOsDrccAR7NX0gGQT/lWztPMulvq3BfFPyBrsZB0o7j6knARE
-            umqH+JcpoLd4hodIPMj6sGUZa2mXTEUfr68AoZeKeauPAqbpsyLyHzmzMV56DL6D
-            fzpWQD3wdmV3MijjCWD1faQtlb52/VwB/m/ZBC/NNeQSkd0e0PlncInX6IhdF4eT
-            +lR6PpK6oddpcBr1REUgSPTOLp9NNyFgxDvkLb5Xgm8ynWKpL+YD0eG1aKiGxIcn
-            Z0lCrj9D7LgP5B5cJcvK+Lt8ScD4QixZMrvINEiG5mm6+rjyVIR9Pri77aBb+E4b
-            XulhoYjMUSu7nQSqO6UciCqL5J7fnFV4Sdmzi4o0PoOLN/n9VJHB5FdzMN23a6ze
-            HKClxLx+hpRI6VdAwVPkl0eoV/qKp4XEXlmRi1vhT/eiV1T4cnUHe/dAlU2apXny
-            ZkcdBtMJUyLUhIgPY2NzaDjsvl0TvMl1rFmp/mKeqesyH7znOfePic65x3d8XmNF
-            KNZk+vfxp3oClO5RC5Bb3myDlozMPMnoF90BYULWMaCbYuDU/heB4fTcm/nfVPPS
-            XgHgBG4uASgSyt3PWJdrR3PsCzIhWv2HojFWQlVoanfEm+qZ2/nHrSuzcqeiytbr
-            nRnIy/Pxwyid1s0+WXGqwCYc/H3DMNN+Y4AL5H72pl2CXuJ68wkVYMWeYYs+OhI=
-            =lggt
-            -----END PGP MESSAGE-----
-          fp: 554154FFF783DE317FCDA0EC77149AC618D714D6
-        - created_at: "2021-07-26T01:56:21Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy9oM+0P010UAQ/8DXn/Ht+vBz8mzk67alMu7dr+aRWf0NtJ4MPz/up6yHFw
-            f8VFStzhKSQDxbxlBpEKmMDzIydpCJyUb9WEM1UzOSCJdbqLZ0bMp9AgIkWukJlT
-            YYraR3O+YETxE1pUQDhNOBAU0no1bzWPQ5LQH9b+YGfk96bJ++NK3upFRvSjYTXc
-            55h8UzM8tHzPYQRgBK3+j7wHt6T1jFpQslAF7oFVGXes8xqEZF8E/Ya18a4meIm2
-            PX6fxO1bu53THnUGEl9jB2BaJIequJdaU6STFF0/ilS7ceo92jPtJJ6RnF7uEX5x
-            tkrI1UKZjud3ZGw/hVtd0YpihWSwZsYPZUn8/gGWYE8Fz49ChxYkTZhuMx5bO+Nu
-            caBrzMJOqADRK4NQpSWTQMNLZX6XJCQwuM7AH2fKW8Q6wpiZBa+SB/NDQ9JtI8tu
-            rhkx2gll+C5kSki18xc2Gpmn4ey1sRE46R15HjYEb0fnx2Eh7npVAuCdxr8CCCX0
-            t0gjrnTlCPLNRYgGoSMnyak+SOtkxcPtzuPeApQtIq55zxY3y0dNwjXhQBSHpGvw
-            8ovBGulRac8KLTYx73cTOF3BdTrQNB4acbAa7/YLdVGWVe1oRRIfk1JCGS6xZ6gq
-            QW5DxKyy+1meQ+mBKPO85rjMbgmuws3KLzNuwY2AEFnDZhNlcNJgYgKUQMBKrrzS
-            XgG2dCrKT9YTLVHYvkdEKIWaoykeGuw3YeJmozYG0UAWxLwDf4NF45FJjobS+vYw
-            vXKBisHYK6snZ4pXAKD01Bza9Lgqz5HSqiwjb5/yaYGtzW+BjQ+1t8zlbINw6ng=
-            =1hRj
-            -----END PGP MESSAGE-----
-          fp: 4B675CE4CC642516AA9AE1DAA88A97FA2C009E2D
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRaXVtSWV2R0NkWTFoOEt3
+            bUhXNHFFRjZHQ0tZdHloZWxwQWxiS3dTQUhBCnNXZ2tpcmZMSFlTdEdDaXlBcnpD
+            RHZwb0Y4WGdseTRjVHF4L0pnYndyNzAKLS0tICtTK0k2SU42NUVPZUlrNXh5WEZG
+            bDVwdlR6akVvYVFqL3BVQkU4RXBtaEkKrxt8c6ZKxxs/U2oZI67Gs7o4e3AZBk9x
+            mL56K+vgrffQXlwh8O3BXzty3oAQHU5t8vrVJmeTejrpLTGuc72i4w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-11-24T15:58:02Z"
+    mac: ENC[AES256_GCM,data:HjjWYCYoDMXpkWwPXRlQimP1LaA+21VWC3f4ntpbX8YOW6PvIGmJQOeN/XR0nGgxt6iwKUHUL021GpL4FRL6blkuCeBBPQBPR86BL7immX7f2AB8Ajh4LHk2lGlpZCo00SeZlMpGRWzbLt7ovPqNsC5z0lomZtDQjfKGDNoYKvw=,iv:LDBdoXdZK302guiJ4B42pOMicBZRg6HsRLAwSVFwIPk=,tag:q4EZ4Hzjih5XPQgpp+RREA==,type:str]
+    pgp: []
     unencrypted_regex: ^(kind)$
     version: 3.7.1
diff --git a/provision/ansible/inventory/home/host_vars/gateway.sops.yml b/provision/ansible/inventory/home/host_vars/gateway.sops.yml
@@ -1,54 +1,23 @@
 kind: Secret
-ansible_become_pass: ENC[AES256_GCM,data:OJFNQmpQxX9CJSXU0w==,iv:1bIQD8syvEua7REY+aFJjFLaZkHjjF5ACEbY/7qB9EU=,tag:Zpt31+hsn+frtIgYrh0tNA==,type:str]
-SECRET_DOMAIN: ENC[AES256_GCM,data:n0LomvU4DnU=,iv:J4u8xVUCfm0pWL/8rUQeVsLKRd4manWQuVByUmrPVO0=,tag:JD6Eidya8MKAxLhcmc0K7w==,type:str]
+ansible_become_pass: ENC[AES256_GCM,data:d76NRJGfRJ6g0wQmHA==,iv:f76lsZDth5Y6xWsClEO34s+e6aOCmpv88KlL+tdBIDg=,tag:Tc/hqqX1xkEfFMM9hkVqKw==,type:str]
+SECRET_DOMAIN: ENC[AES256_GCM,data:6Tr7JOF+LhY=,iv:X8kZXTBhP48pG0QzOOCRGibgt3jcZ3zdpW4nrzJXg9Y=,tag:wLEXVLtIk3ER5iPwQqm3tQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    age: []
-    lastmodified: "2021-09-30T17:43:31Z"
-    mac: ENC[AES256_GCM,data:nFtMjweV5pAsBy92Ei4/MqIdp54Eh+nDzl2JvwBGltNONBaVy2WzGDcQxuG3iUrYgfJ9Dpc0KZXI4MKzxSA8wFyGzmRS5h3Z1dNEIGUQf1GsgkQdDeurWKCsXjS5DLYhV8k/bIGPYpLS5r6YTTjet1Y6GgHmx7Ym3A6x7SK5ayE=,iv:e/xvf3voMFjn5Y0VOIVbG68HJXp6dc8UNjk3woHzGKE=,tag:aGwoF7FBC3Gbnj/SRfF5cA==,type:str]
-    pgp:
-        - created_at: "2021-07-26T01:56:27Z"
+    age:
+        - recipient: age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta
           enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA6zq3fPF3WITARAArBabLWeX+34JU9rrGN1TqoNmvspFbu/xtgfKHZFngvLm
-            NWc4PQ2vabuvUQ3lXE509YSGfsHFp1zzsfSkEVQUAFt7xawXiMExHz+vMUEcttlD
-            QSNwXNjj3vUg4+xihorRifCPmQ7lrHirfkrAR03oi5RQ52oNY4JR5KPcVmG/zBBI
-            5wHmW04NgN6KtqWFzQqy/7oByCDASGe9BCInXHE+OkKjVsz3nG+q6yrj7SXbVeeM
-            GWgJyLodB1zaG5tPNbjtX0LU1mnvf99AN+taELgjNLmFR7QkXgg/r30rDYMTCNiv
-            xFhY1HVBtUfoI0N0NOiTT7/XmrxZHtz4WLRXO3BHP/Vyg8+ESySZlMP2yofplhyG
-            YQ2+hZzM06Pta24XLQ63TViOT/0J+5iK7znwIkFUPiFrgBaT6n/xD76sWyaHcIg0
-            bOoaGjyqCgCOEpGlW2JKsbdp7q9hJGaNOnWbreJ2gYHcVBYyjHlRuyJLFvbWSFS2
-            AHB2lpPDSdKeIIlI1pCg5hybVzLOUXRgRhfjdgDFrgMbT4TZ2V2Xqu3dsYEXTSCv
-            ZTw8wMWdJ4zTh9yP0p3Ort72jzP46Pbd2xdaaKwUyjsajCMG9s3FnAKhKSCAQb4J
-            nQP3Le+SyyBhihWqBvQcOdYycXICfHzBejgdtaq1044RNRgF0Fo48q3PtgHYMb7S
-            XgHLD6EkmAUQJMwuVoUY4tIme7nQ+wGLJs+ynLpWe6UoG5baUu6wpiSus3wwZi2a
-            jMkImxxdCCR/qZqobWPvagL3noE7GR0RM4jBSZwqfNvu5kAYgt/wDaV3Lus8EJs=
-            =I36h
-            -----END PGP MESSAGE-----
-          fp: 554154FFF783DE317FCDA0EC77149AC618D714D6
-        - created_at: "2021-07-26T01:56:27Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy9oM+0P010UAQ//dU8G00FPRaPd8H1m4guowoB3Ie26iAdkDt1oI9XZbX/g
-            /EZHZjBF5C3q/GoyLwpnC/+Ir4NLug0G/6YvHgMbVej+ghjctuqvCxvQlHfH640e
-            M9EJeHOLHqo1neJfFJs7HkANTF/sxjs3A8tuCoL9qqjupIBCSZjxgWI/iSTyzWOs
-            bxFd/sYzOvjoIHWlCAyZrCMKZkMiCSnjBUBiH5OFgTQGz3UrusFRS5+I65gPmM4D
-            Y2Ww8IByohCNoP4q8EzUXnLZpYJNhLfeQV98BH4qn9qurKwwiryE9dRI38DGFTrp
-            6ixGY9H+VK0J/B+dojNMe64h3Oox0VmdEf9lnOLD4FTCf57v0XovooSdgvyOzQhi
-            y7YBcICOGx6T1/HRyrwZEEErw3vJ5XDWHuAGYgi+QwLLEqUh/yqYD7MROUJy/GCz
-            KqDrKW2Iz9vKSktKkOtCImY1PFfYaFWbs5i8oiiLaAiGlNLf7uW9uuAxNyXYIeDF
-            8YJTcRCCWJKZUQIugrEH9KYO2ZXQ8AD3RokHMs2PvyN6s4kkyPIw/FqnKUi8JXW8
-            zNcie+gZU79H4dUDmK1yZhtfjjhM6Q/dlNRzAk10jaUK23rsUYfpJKnMIzo6FBvV
-            yYIAM8ymi18VRyUX2LXPuqJvRuy0yGa/S8Mq8TmtHZCuBSgYzW5Mrr69p6XdgYbS
-            XgF9fAnhI4Tk/vaT4aWxrDE0stBpT1u7aBPCWSMW1p4ggwLa3JO5rI+vl3I5NfKV
-            PM0e2XCoIy0Z61j+hGgrQ5+Hd9LxBdXZxv7xoz8LIz670FxKVAlQQDfbKT9/9/g=
-            =mofP
-            -----END PGP MESSAGE-----
-          fp: 4B675CE4CC642516AA9AE1DAA88A97FA2C009E2D
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPL282V0dyUU5XelBtQVlm
+            cTQ3M1Y3RXR5SitaM003WXpZMkllWlhTczJZCnE4bG9wU201UmJ4dmVnbTIxNzdp
+            ZFRGcDBpb0xVT1duYzBESUdNZkw2ZXcKLS0tIGdRckRMSkJBSlF6MDM4UEdOS0Uy
+            Z2ljNU1VRjVrV1QyT2ZkL3VtRXc5a28KWHsowxi06OYV/1Ur4xpy3xx/8pkT55Q+
+            53tXFhc/rqGGi7zcSJtmbZotyFVCdlK3ixDccuecpzOC5ohtsWPSjQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-11-24T15:58:09Z"
+    mac: ENC[AES256_GCM,data:sHhFKqgS/9UhQjB5XNaAy5N7tm+D6W9dsBibXKNTv2Oz+Nz9xURGkuot1SFISWaq64RgsBl1+oOyRcQz6MdrM6hjD/DWku9GJ5PVo2FUv8fDTjXW9VT2VMtrYofrlJPTc2sLz+EKAT5W45Bezr3V5HnBbC9USDckYqfsthv5w+c=,iv:JV2nBCIOWUSBYUPwSaxfAk66YfEio+g2wI8F/eJJqD4=,tag:fy0tcCTs2mtqB5JLNNvB4A==,type:str]
+    pgp: []
     unencrypted_regex: ^(kind)$
     version: 3.7.1
diff --git a/provision/ansible/inventory/home/host_vars/k8s-0.sops.yml b/provision/ansible/inventory/home/host_vars/k8s-0.sops.yml
@@ -1,53 +1,22 @@
 kind: Secret
-ansible_become_pass: ENC[AES256_GCM,data:4u2zbHwM,iv:ttycO/OmD3jkIiciTe/kvaKxTra+zzYR9GD3hN7nPO8=,tag:4LdEstRqikKUWT91EoKZDw==,type:str]
+ansible_become_pass: ENC[AES256_GCM,data:gE6ifQ9Z,iv:WwAZEUctSOo5u1SJKlNFqWVCOGFoTw6mf5b/W0d968A=,tag:dLL2KCmN+WmRCIzyLgoTtA==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
-    age: []
-    lastmodified: "2021-07-26T01:56:35Z"
-    mac: ENC[AES256_GCM,data:SUAgFXqTLAZ27KCMDBMKepB/mEuBeOmBJ8uyB6Io+dcJtbi/pCbstIhoEpMzCWM5XatndSlGiqnRpZAHv2YntjHLaC9j7oyMhnkpRbt82u5hpZFsNtyOb4qZVWdUlJX9DWjweqMJum3kcWi78Rrkna/VlR9HCctiOGKoKqgmaYg=,iv:DA89Rp1g0/OBVBcfGWL0AziKkGleFh2PufIAKEfY2sk=,tag:YYxnPqCfxcv3mj6cRYjJBA==,type:str]
-    pgp:
-        - created_at: "2021-07-26T01:56:34Z"
+    age:
+        - recipient: age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta
           enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA6zq3fPF3WITARAAiLtkxpeEnKDf0HKIkSUpdhBK9XJvAFSW4LkwrrDnNeMe
-            X56Grhvu3jxycv/AHYfBcywDIyUq6wm/D7pnYkBqydERMSPREnpieMZudEj2xxeU
-            /W/kXj+LQLKyzoYugAN1L0DPVLXSBArwU86oCSDn8i3nJRT0tylrU4kpcgKjwo26
-            U5UmBsw6Xx0l/Bx6wSDtY6c4cjr4lRfONALaxF/trovEHjQg4rjLEi2t/aOE3KtY
-            k2olge8IVNtJiQkgMCtk0Q13FFjWlVbm4vPJE7v6s0SXaALtk+A5Ar9hc4qEr20p
-            e/GkLL/x2WooS8SuUkVjcLrdSs569OCMGyQiTrQJm2rMDZP4VRYjmxCMSOFi8Xej
-            G6x8Y2u363SIpAeqrjabtu1fFItWAtVwuxQMhEm/sAIZxBZt0c7ijtPBfWliw/UO
-            +fk+xB9uRTSKU3ann/aJdx3p7ey4o5xJB9sTuSX02ZinM9Gxpx/xRNRsF72egna0
-            c1VcpvYHa67stuSd/m9oQ6d2gv/Adc5HjSu37vycQKEkDeggMY64it7jtN3R2/uh
-            EeXs4zqwSDkFeMub4lfY48p4zDfgi+ccXfvcHBWuz+yWMGfDOT2958qwuLvOtlJc
-            XlnbZFz5t7M7hcrk53734vGWmzYU2qiOpT3mF/oncEySvgetCp18OQDCYUz70pLS
-            XgFgHMcE6p4s1xpypnORaaaHV3AsirxptTimUYsWDzVHsFrSinVjMTGzJzsWC0Ed
-            xkBoND7JQsqEK6G6PV8fZI9AtFJNS9RhOn43WSavX0D+gg5egLFkuq/FNz/MQrc=
-            =40rA
-            -----END PGP MESSAGE-----
-          fp: 554154FFF783DE317FCDA0EC77149AC618D714D6
-        - created_at: "2021-07-26T01:56:34Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy9oM+0P010UARAAnIri7Z70xPpzZL2K57QFrw9J7qsM6zaxJdS97X2xULIa
-            Fx2/BRLUCXFl6buWHdY0CYEJy1U8SAOg4SwBImpShMBsrHMWuf3YM0bxaDOfEmRB
-            +cOmn6AwtIrmXtQdmg3u6J2OjJs8DasBCFF6gAQwdq0tFqq6QNGYN2IUI56NGCOX
-            A5zw1lcGaTOT8pbWx1jqGgqgpPTbbSY4n4mRD0Hk16AHOtfDBQZnIgubgAkukPDv
-            CILMGH0p0sPxlO2xJaf7EWIHuWON5q6ufX//7maTe2jvE1JtdQN6wB9pRMeABI8o
-            lXzEOkfWsMGRiOAddQANRMQiY8cA/CzJ0tVCGnq5H6B6C3huMg1MqRwZ5lWu8LTw
-            rh7/g6SXXNckHo+09p5UO6dXZ56uC+QHOJL2f18iQakAu3+a7B83NVYp+yItXmn5
-            jPGywrKHI4hR1RzqkM1J4JQJjUe8izRIOBJaXd/ZLKWiqxCOEzUtZJSvd5URvnIH
-            iIF73+XdMFD/qKcIDJoCjCunUPnN60SwQtThGf4r51OGhM6Wj7a0HtSFoi5FTROL
-            CjbJwzGtYqwF2T0em8Fk+TacrHETCW13blFabwBCRGwGMX9hmVSLfJtWxgyqB3yy
-            quFxmIBvrtZQk//HufVW5lJsVpYb+e4HUuf80RDDlb1IvAzS+SXthsYVuYF+hw/S
-            XgHMMZc7YYbKrkq/o3BPR7SixM7RxwHQ8FNEYmYfreuECkAZr/wAQfgNbuzTymEi
-            /a1KDajAEmTqNaVoX5H235GpvDxolbuUZ+OVdXEpQv8Yj1RfbuWjMLU9npa+w18=
-            =0Hiv
-            -----END PGP MESSAGE-----
-          fp: 4B675CE4CC642516AA9AE1DAA88A97FA2C009E2D
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOeTVmalh5S3grTHpVekth
+            Z2hEUjZHWFJ0anRhbmx5RXhiSXpnU1NKSEhZClpyQ1Q4Z1RobW1nSHpWNEFyRzRR
+            QTV3S0dDc1BqN0NpalNwSmpZVTUvSUEKLS0tIEtKVjErS241SHgybHlSWldsbE4z
+            L0tDTys2UldBT0NnK1hTTnArSEgySFEKPXcDa9SNLgRcAzIOlgwHvsYgoeSvLWxi
+            WqMNaALSOPzWQZxXm1TOh8EsCykLo4fmdSBLdEfwNapf1BBHdGV3WQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2021-11-24T15:58:16Z"
+    mac: ENC[AES256_GCM,data:4iiXfowinku/182ndIK3AmF3+ttawShr22VSjSHX+pZnLmXvnviEAyTJ659K8BbjErLP6APZmLtCD4MeO0TfSe+ovh5FlqDTOWsrMScbVA/MZ5AyRXLJg5iffc8rZlAtZg8LsAeSSeWpIjm/GJt3P3Q22sn8QW7JaTGhFq3+oA0=,iv:M9w2H4VxIH8rG7AUDAWvtApdJ8awx7KaFTeTJgOhe4U=,tag:BEkTid4ixpiaiLzbMKx1yw==,type:str]
+    pgp: []
     unencrypted_regex: ^(kind)$
     version: 3.7.1