.sops.yaml

creation_rules:
    # By default allow following keys to encrypt/decrypt secrets
    # Specific path can be configured as explained here https://github.com/mozilla/sops#using-sops-yaml-conf-to-select-kms-pgp-for-new-files
    # !  The first regex that matches is selected
    - path_regex: secrets/config/incrementals-publisher/secrets.yaml
      key_groups:
        - azure_keyvault:
          - vaultUrl: 'https://prodjenkinsinfra.vault.azure.net'
            key: 'sops'
            version: '252fc7e646ac40f184ab4a6016484725'
          pgp:
            - '88FABF5F307FB5870B6AD2E8A266F2D3F9D60C45' # Halkeye
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F' # timja
            - '29B84443F41DE582F71599AFB47082DEE225AE06' # dduportal
            - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD' # hlemeur
            - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344' # markewaite
            - '6CD774F428CA355770C67851496D2EDEDEFA7D47' # smerle

    - path_regex: secrets/config/jenkins-wiki-exporter/secrets.yaml
      key_groups:
        - azure_keyvault:
          - vaultUrl: 'https://prodjenkinsinfra.vault.azure.net'
            key: 'sops'
            version: '252fc7e646ac40f184ab4a6016484725'
          pgp:
            - '88FABF5F307FB5870B6AD2E8A266F2D3F9D60C45' # Halkeye
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F' # timja
            - '29B84443F41DE582F71599AFB47082DEE225AE06' # dduportal
            - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD' # hlemeur
            - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344' # markewaite
            - '6CD774F428CA355770C67851496D2EDEDEFA7D47' # smerle

    - path_regex: secrets/config/plugin-site/secrets.yaml
      key_groups:
        - azure_keyvault:
          - vaultUrl: 'https://prodjenkinsinfra.vault.azure.net'
            key: 'sops'
            version: '252fc7e646ac40f184ab4a6016484725'
          pgp:
            - '88FABF5F307FB5870B6AD2E8A266F2D3F9D60C45' # Halkeye
            - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F' # timja
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '29B84443F41DE582F71599AFB47082DEE225AE06' # dduportal
            - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD' # hlemeur
            - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344' # markewaite
            - '6CD774F428CA355770C67851496D2EDEDEFA7D47' # smerle

    - key_groups:
        - azure_keyvault:
          - vaultUrl: 'https://prodjenkinsinfra.vault.azure.net'
            key: 'sops'
            version: '252fc7e646ac40f184ab4a6016484725'
          pgp:
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F' # timja
            - '29B84443F41DE582F71599AFB47082DEE225AE06' # dduportal
            - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344' # markewaite
            - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD' # hlemeur
            - '6CD774F428CA355770C67851496D2EDEDEFA7D47' # smerle

    - path_regex: secrets/config/plugin-site-issues/secrets.yaml
      key_groups:
        - azure_keyvault:
            - vaultUrl: 'https://prodjenkinsinfra.vault.azure.net'
              key: 'sops'
              version: '252fc7e646ac40f184ab4a6016484725'
          pgp:
            - '88FABF5F307FB5870B6AD2E8A266F2D3F9D60C45' # Halkeye
            - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F' # timja
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '29B84443F41DE582F71599AFB47082DEE225AE06' # dduportal
            - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD' # hlemeur
            - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344' # markewaite
            - '56D8342434B84E2D1CCF53D96E9A025D52210D3D' # Olblak
            - '6CD774F428CA355770C67851496D2EDEDEFA7D47' # smerle