2 docs tagged with "secrets"

How secrets are committed encrypted with SOPS and age, which key encrypts what, and how Flux decrypts them in-cluster.

Rotating the in-cluster age key without breaking Flux reconciliation — walk-through of regenerating the key, re-encrypting every committed Secret, and rolling the cluster onto the new key without downtime.