Linux command
sops 命令
文本
Uses pipes, overwrite, or deletion. Check paths and options first.
命令示例
Encrypt file
sops -e [secrets.yaml] > [secrets.enc.yaml]
Decrypt file
sops -d [secrets.enc.yaml]
Edit encrypted file
sops [secrets.enc.yaml]
Encrypt with specific key
sops -e --age [age-public-key] [file.yaml]
Rotate keys
sops -r [secrets.enc.yaml]
Add KMS key
sops --add-kms [arn:aws:kms:...] [file.yaml]
说明
sops (Secrets OPerationS) encrypts files while keeping their format intact. It encrypts values but leaves keys readable, making diffs and reviews practical. The tool supports multiple key sources including AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.
参数
- -e, --encrypt
- Encrypt file.
- -d, --decrypt
- Decrypt file.
- -r, --rotate
- Rotate data key.
- -i, --in-place
- Modify file in place.
- --age _key_
- Age public key.
- --pgp _key_
- PGP fingerprint.
- --kms _arn_
- AWS KMS key ARN.
- --gcp-kms _resource_
- GCP KMS key.
- --azure-kv _url_
- Azure Key Vault key.
- --input-type _type_
- Input format.
- --output-type _type_
- Output format.
FAQ
What is the sops command used for?
sops (Secrets OPerationS) encrypts files while keeping their format intact. It encrypts values but leaves keys readable, making diffs and reviews practical. The tool supports multiple key sources including AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.
How do I run a basic sops example?
Run `sops -e [secrets.yaml] > [secrets.enc.yaml]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -e, --encrypt do in sops?
Encrypt file.