18 lines
471 B
YAML
18 lines
471 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: encrypt-target
|
|
annotations:
|
|
config.k8s.io/function: |
|
|
container:
|
|
image: gcr.io/kpt-fn-contrib/sops:v0.3.0
|
|
envs:
|
|
- VAULT_ADDR
|
|
- VAULT_TOKEN
|
|
network: true
|
|
data:
|
|
cmd: encrypt
|
|
cmd-json-path-filter: '$[?(@.metadata.name=="combined-target-secrets")]'
|
|
cmd-extra-params-json-path-filter: '$[?(@.metadata.name=="target-encryption-keys")]'
|
|
encrypted-regex: '^(data)$'
|