2 docs tagged with "sops"

Encrypt Kubernetes secrets at rest with Mozilla SOPS and age, decrypt them in-cluster via the Flux SOPS provider.

Rotating the in-cluster age key without breaking Flux reconciliation — walk-through of regenerating the key, re-encrypting every committed Secret, and rolling the cluster onto the new key without downtime.