SOPS

Time guide Validate an existing encrypted Secret: approximately 5 to 10 minutes Create and reconcile a new encrypted Secret: approximately 15 to 30 minutes Investigate a decryption fault: approximately 20 to 45 minutes Purpose # This entry describes a safe workflow for storing encrypted Kubernetes Secret manifests in Git using SOPS and age, with Flux performing decryption during reconciliation.

Encryption and recovery controls for 31 Git-managed Kubernetes Secret manifests using SOPS, age and Flux.