viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
infra/state/stacks/dashy/terraform.tfstate.enc

600 lines
57 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:Yg==,iv:dxy3PNysGBAOY5NBfrRz5W+W+k+eSbAA1KZnizF7nbA=,tag:5SSbDc0VH16o6JA+N+NbJg==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:RwWZI44=,iv:heejVC5h+f6M/913tGQ5d4r1yXMVTV3Lov7LMppaAqg=,tag:ibhSuI9GWQbQFA0DYeEH8Q==,type:str]",
"serial": "ENC[AES256_GCM,data:NKY=,iv:9j7OWzokktK8bY4scJSTtllFrFVoVXFo6mjdXig4x5s=,tag:S4ZEYtHQon/iVtRHUXAFbw==,type:float]",
"lineage": "ENC[AES256_GCM,data:BBh+rULYDxUhhH6G34qv3TQdppHjsEWQY17aWUfyHcAvNRuq,iv:5X0ndtcT3/u/5QhI9ycPl/IBMdMv9p6Xwp9ix81Thrs=,tag:uENiXX36q+8PBlcLkn7M9w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:G79VujS6Mg==,iv:GqY51FxEXldkEPAbeS+3P9SNaHqFVgYR1+sfN9GXp28=,tag:1/WFAjZD2YzRBDGr7MqdSg==,type:str]",
"type": "ENC[AES256_GCM,data:IBzMXI+6oLzwK4p0w1bsikTZTU0t,iv:jTzNS58tCuMPPr2K20ADwvHKMKwIg6NmGYkR8X5CMp0=,tag:NngbzX+07XgMP2fq1zHxMg==,type:str]",
"name": "ENC[AES256_GCM,data:oPNPy4JU,iv:4GpWFzr5BO1DmOp+9ytWFVNyFqaEgB5CRRktgjRfMBI=,tag:Mn0pMVtFHjm/vgywJ8sYig==,type:str]",
"provider": "ENC[AES256_GCM,data:5oo0UrZkSJXPrsVAdLFHrEhR1W/SqVdeikH0qaorA8K2jR2Q/z1xl3+fEGz1z0WuqT3wANZG,iv:3pXe32EaFwJeCXw9l9/xlrpDmnLwPQalIoFZzEURbqU=,tag:367l57oQptIEEaF0lNS+kA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:rA==,iv:2WFIcGO1P975r2TNrZuyxCgh6SmQ+gwM5Z5X+TdXev8=,tag:EmV90b5/wmI6l2F3pqhTkg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": {},
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"conf.yml": "ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:1AH1xq6LZQ2viqdc,iv:k+VOZKxM6ofOuLf+QQfKSTZB9fY9yAQjtfEH+NrvEiI=,tag:NaG//eoPMpKuOE2+F+2sqg==,type:str]",
"immutable": "ENC[AES256_GCM,data:RAZJIGQ=,iv:r004K13K8d3QJg3yeNX/yF9FfrRYYhxh7YfaWUJlTKE=,tag:fi3tBnZTBfGWf8vpjAtMXg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/match": "ENC[AES256_GCM,data:D6ClUQ==,iv:bFfNgBuCJtI6B3rhRMGN5ANz3Elq+ixs0ao37f4/TNg=,tag:C88tDs5/IGfYt8UKuYemGg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:ow==,iv:wBAC17qsycxxsXxkYO98SWXkIP/OwbS2r/SIMHNela0=,tag:0ZisUhZzxvgTgOr7yy+OaA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:wuP9rjp0,iv:6D7IxBR1DuV7DopAFHc2GTkYyOCtPvLmph7EXWuoAPk=,tag:OgrxLHlIbwx2sO9lDf5n/Q==,type:str]",
"namespace": "ENC[AES256_GCM,data:i/iPOJo=,iv:6HXBZDbC0gzMHuHNsJnc00V/xmCC0kutY/ho8aiEeps=,tag:uCgazUYbHW7Yg2Q697gKzw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:dtFXHRqmBLrl,iv:B9MtjsXltfRSEkDtvNfM/Hk68I8Hz+wrIhoqPHVPJcQ=,tag:hajLG+Y0huSYaBNwBqbqyQ==,type:str]",
"uid": "ENC[AES256_GCM,data:6rmQLTXSKpjtTdqcdrdk1ntWIcUb9c7G2fGh0BRe2xVPccla,iv:k+XEQ4Ocgh8Fzis+K6Ty6qz1hl145lU3Ns6bcAUb8l8=,tag:9Yu+JWI139RYb4vpG8T70g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:D8EGX2TUYKM=,iv:nqhdVfBI0M8Stgufqjwn1hpNKwz1PYlLy3zLo+ZpzUk=,tag:yUfKtzZtcBPRMXnI1HjMWA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Z7CGJqD8j+g+xllAjZ1g9iYpaQt0Ts23db0=,iv:sp2z7Bzy8jKAJVImC7usJb7o5qXJt2tIlUenA1iHY2Q=,tag:3+1XtS7PvGyb53Dz1g4Crw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:lL1O4AjZAQ==,iv:8KZr6L5M+rcUOf54Fi06BFSqQKVguUCfiicw5+BFGG0=,tag:sbu8PJImKPBziEC8Sw7NeA==,type:str]",
"type": "ENC[AES256_GCM,data:2/fgEwY6+gPsSVcS2iW6gSegAZGA,iv:dCGFKo1ExR6PjKCFHA+1DSQqS2JCOoV7tJ8TeBlMr2k=,tag:wbVNYkRECtSqw76CQUOoEA==,type:str]",
"name": "ENC[AES256_GCM,data:1b+JvS4=,iv:ek+KZPwenNBFFGqki978n2PGZ9sgV/I6fSPKMihKMzc=,tag:eO3kCO8F9C7Ug8USEjT25Q==,type:str]",
"provider": "ENC[AES256_GCM,data:4s+JoHTnCUoaEhkB1PQiZAgiOBCtHuANGE86MVAAjPJSOpGdqMuLCF8oDJCmYfz/yuuO9UgI,iv:d+5H5y4+WWPewzUzPoZ9jpcDxsiTdjnsTGvW60kLNO8=,tag:Z03xkuMkt4AekdU8YXExJg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:1A==,iv:ZURxWMATTVrXmw+eIOsu55AmuXoCGpKwtsGfpkNsCQk=,tag:WlGc6qlV95Vz4Zb+gGSvvw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:+X5gTCC+4u6ysuU=,iv:z4ERbzunHjK/nFOOFbLHob/8Z4IjDhI5kS6Y0AzGPvw=,tag:wvMcn7dB7LQZLGhFQnyXQw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/search": "ENC[AES256_GCM,data:ubpivA==,iv:W1Kl1xVaA1X8ojJxAv+fY8/E9l+NQugr3PzHS2jMPVM=,tag:OSOjrKKGXGkQ/VsKySydAA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:GRg=,iv:66G9mNqt4XT5hutfvtWI5IHYjLq55LxzmCfJHSyLSKQ=,tag:L4+qWf4+3bxtRUED7BfHjg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:WFT+wCI=,iv:noN/yDWQknG5JE74ORuYX9SxKG/nn7q+UffAmWdmU6E=,tag:MLxNDk/bfV1x4FXDnjAD/g==,type:str]",
"tier": "ENC[AES256_GCM,data:BdVASQo=,iv:FfKvoCuO/Q9naXV0kDkzYGxTat9P9vnnt9n19rT/dSc=,tag:vpYKHLg9J13iwtxRMAZDeA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:XIF1bts=,iv:zA4fU+H17WHfuYQsqaTLUImwRblsObNEJ11miohEmiY=,tag:OlsgW/EzipaVgHwposrMLA==,type:str]",
"namespace": "ENC[AES256_GCM,data:xGEoga0=,iv:ltRtEKdqiprJF2oqDaIHxMFu7eyPZnavJZCWQPIfR1s=,tag:F+PcH+seZ8iTGQjb7k17ng==,type:str]",
"resource_version": "ENC[AES256_GCM,data:ldZVZJ3JTr+o,iv:ldWKNUULbHDFCuZtS75X0ClEng7gZBN3XFvN0SaYmGA=,tag:Mw1mpAtVwxQfFKxPd6+nkA==,type:str]",
"uid": "ENC[AES256_GCM,data:N9dT9Dj6WVgnitOSigSd/YNonlrGEGEY/VDuwp7rJd12T3MN,iv:EeFsvHl/yrIi0+TKYLPSQOZtH60bcp6+Jm4U+ZcKSkk=,tag:wqCnUXo5euIczol2cIkIxw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:Pw==,iv:At7G1doE940q8H674IlhdQslDGvRACYfH2pIGUbIccQ=,tag:enKv0gIKsrCVdCJTDRRttw==,type:float]",
"paused": "ENC[AES256_GCM,data:1jTsZNU=,iv:/0M3PvGX2dWfyE2giz3LldQfKp1PPNKX8CMtqdDNC7k=,tag:I5xLNVt5RJWJo/xX9PT6Hw==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:qxD6,iv:QkzFaF4IGgwsKWGKLspMH++gsZMEBKXvX0rcK47JswE=,tag:EMmIrp/1a7/ehqN71kPNWA==,type:float]",
"replicas": "ENC[AES256_GCM,data:Aw==,iv:CZ/0vFsgM8XyUqnXwcHuluayOPM/NL3VBx8nS35M4JQ=,tag:ehqBJb+WQaUFvoZZ2cokyw==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:+FE=,iv:QGQ18iR2lU+Xo8ZLb8KOf1tz9BG4b44rhZ/EeDYuRHc=,tag:vz/+HDYDcABJ0Bg1shjlkw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:gAm6XJI=,iv:GJ6x94Sg3PXwW11xLNwzt8RtqA1rglRkIz9mlKSoJRc=,tag:DTNw03ssG+evOCrJCNdRnA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:y5+O,iv:Z0ma1UjXdmYil6NPlzDGk3ggR9XcmKtR5vnnhYHBn4M=,tag:Jcui10F5KkY7rulQMBcZxA==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:yh1U,iv:3cvKIG4I42XJtoDsmzLjpceOIxJ01EliO9WsyfhjRZw=,tag:bXE3w4DfN3kLdH/A+rmRJg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:+NtsOHhhekL6Q2G39g==,iv:c+fZU+1bO3eDw004ouqbEb+osyVxPz58sbuSJpj+zMM=,tag:WYsWppM0KmBgAjC0/11X3g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:4Q==,iv:kr517NRxok6U2fEPZn/dMsLSdbySaMiTFxFH3UsTsJ8=,tag:aIOBw+jBySXcjtJMdEv7qA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:mXpC+jo=,iv:3Xwnw6KHsjQta64ludh2RLA0meTwNNJkHKbsjNMAbCM=,tag:xQOKxdtYDypH49HugHVSZg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:Wg==,iv:Yubpt7sJ9lPmOSmP0DHZuWfSt5Ksn5kglBZ1IfxMQWs=,tag:V4tLXDdX1Z84BMvu+m+mBA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:ekSLag==,iv:GCFXwv/jGvDkRYxTbrptBH9+FWeJpaU0HYCdO/fma5Q=,tag:cang+j6GuBsZdIp8OU+t1g==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [],
"env": [],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:eb2OJRHvET3DxRPd7+npXXHwAGs=,iv:YPUEr5iVN/bfH4D6TGcKjr0QQPRwLMHPqcvSWG+8/7o=,tag:p1FWU2IK16cibvHk4SW5GQ==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:Rmy15iuV,iv:sHg4qbAMEXM6ydsqJS1lb+WT5HNW3B4wjVl2sw8kaaU=,tag:wT9MO/7Hefqh1YT21zgB+Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:uuq4dYI=,iv:592tolnHmjstR/6stAjosoJydGluIxnPJETCfEZ/wTo=,tag:q2U8+PjEAkfc3EZEFenaFQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:GkNRVQ==,iv:OYeN/kJ9zAPluBizPCYpR+ycHs3W1vuc06B8J9/CU0w=,tag:UJvqvJwPcS03Vxp0d8elqg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:vQ==,iv:66afy4Z3ShE2W1cXf3lzlUYOVOTDcIRRWrYWx/CMO6k=,tag:qVGKMs8wAZJX2oqTVYtCtg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:IT0e,iv:yal52TVElUkOy5uvFWKua5l8bHqKOcFYHsdbygKvNKA=,tag:qRYIOoenrveJfzvNQJbx1Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:5k7u,iv:mqVuFVMSIggedruWHXL6zcCcwgq2yTv8NKJayd8mTHE=,tag:L0vDr2/5pbTwetkcrpXoBg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:tExmyA==,iv:D36YLGh5xTbaD3uO4lZ4zKS6yydTs6qHKrLqyejEBb4=,tag:E7nF8QwQUw4AMamP/LUbxA==,type:str]",
"memory": "ENC[AES256_GCM,data:jiGS,iv:ngVuLgsWnGkYnfZCDHKkq96SZjxBsfl8NjApK4bG87w=,tag:xMTDQehU4pw1l13hyYl0mw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:SsjbPNI=,iv:P139a8gyfOidt8C2ekUIiqfxDs2QynRyJLvFsBj393k=,tag:13UpFGXTTolyyiSCECLLyA==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:ily7Ig4=,iv:7f+tF69WupVxPgzXml2Ooe/dnWtA+7ULHWOcTm6kqh0=,tag:+gg/z1Ndv1vRS+s+YSChjw==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:Kv86R1kjPJShwNBIzq2m1ZAWSFo=,iv:XYaxO865XQ75icgFqKpeCn5gcGgQKuM7DlfcJ6XbUUU=,tag:tLeFBqb+OuN2GDdoyhukEw==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:c3xZvw==,iv:9cW6JLa1iOp5nTdgnMpfb51dO9rMWU6SfuR/v7NySy0=,tag:csUY02EUwXLDbnVinEYlZA==,type:str]",
"tty": "ENC[AES256_GCM,data:rr1g+0o=,iv:5Juh/dK0RQthh1epT55NUgURJyy1/Dwn6w2dD946WM0=,tag:8ewNf0QZil0fF11/OHk/9g==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:T6cFMvxpRyQOaoISpnUP,iv:PGNkJqZXcnUOJeO8Sjb987nzBhyQwuFLaTBJUTotZFg=,tag:Q9GJK2HbcJuTFNEBj+dqfg==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:v0qd0g==,iv:M3DkDoyxVMFB5uvVJcfG8E9uhmakpSP0I1wskjARrqw=,tag:zrFvXhjc0FcXzJrIfs380w==,type:str]",
"name": "ENC[AES256_GCM,data:nicY1vPG,iv:jphwnPB0tHMEyfasDzpe3ZKJ9JbY1twSRhjak/xoEqA=,tag:8qdLmujTvibcZRUq0Nq5BA==,type:str]",
"read_only": "ENC[AES256_GCM,data:+nac6T4=,iv:Gw7DDjCkEGOako706ycVar1iBqjegnSch8vj1XjEWb8=,tag:QJkht/UvlOt6iy90H77hWA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path": "",
"sub_path_expr": ""
}
],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:m3mrn1A=,iv:h1846E5YEYoQQOK/JZg1ZLJbBeNG5qQ3O3+XSQEoavw=,tag:J1OAkYG+sxkczMObgza9Og==,type:str]",
"value": "ENC[AES256_GCM,data:8w==,iv:G97m/bX27QOISsbPi1YJE5ZdlrLv8Uq8ZHF+/BznoPs=,tag:Yt/lJmPqRFFe5va313gwGA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:ssddgy/7+zgLsoJm,iv:DKOS55vUGfvyy8Q3JLHuzhfvhHBJjrqCgl2R/NPlSHY=,tag:dSrYnBnwThngnj7acPm0gg==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:YMXMew==,iv:rB7UVm5jrURdRszR27gtCvEGPLGQYt+n6RS87ICwGZQ=,tag:MLQipd2XVKu3VbIodTRSJQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:taqYDJc=,iv:If/Zh347Gdx02TPARtnUGbBEVvXFHbsejrdecPetqJM=,tag:wkFcGGWSOrww9AoMMm6x/Q==,type:bool]",
"host_network": "ENC[AES256_GCM,data:z5CAG6I=,iv:hah6WW/5OFHk7GM2ApQMiXpY825060beHpVsauXbuWE=,tag:Vj/7BvfU/QYWAO2XgDtqtg==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:aNtE4KI=,iv:bkpQtWhkJaZ+JapCHRLD+cTetsSO/ETYGVTL2hdSgu8=,tag:v4GqSBsaMG3dFDH4zPB9GA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:Kh47nabh,iv:obiotyYyj7p91M8+9nW4CqrNUhAUePaXMDf6LzY+LSY=,tag:QIh7zEc1CjQPhejfoeJnSg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:9iuS4fA11t/7ESY1ujM/E/s=,iv:ncVxe9pqC38+XzwlMDglRwKpZi7fbbHEBjoTLWW0Dp4=,tag:homBGmiL2MTv6X55Osm8lQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:EAU/f+g=,iv:R6NQe57WAj7Eet3UE2XVj2cRGcUoPLOpkrTZyNqg+lE=,tag:XE8bPrsLCZKusLdu8Nzu7A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:4xo=,iv:zA9W+fbLVAvoqt/sWnzlWnjy0K/th/sjHnd4Q5TVjNU=,tag:Pab06edAi8WysHGllrWeWA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:fHWy5g==,iv:WeRqTQMppOFh9OBOCd/aSOz0MH/fn7/3mPRe84ufA+o=,tag:H9Sbs4SIVEaRJAPCVRpr5Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:hz/TEWa0,iv:HBXRI4kMoyJW6D8VYtFpYeT/YTLd6/uDntqb40xzksk=,tag:12aPhX8I+wsaYrNck8ln/Q==,type:str]",
"optional": "ENC[AES256_GCM,data:VVYpbFM=,iv:rDhA6tBdpXrYpYKiGmF0n0RwyWKNjQoR3VNmi0N1wUQ=,tag:EgrQbzAG5vxloa9tf8fecg==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:u8bKyTdv,iv:V1xeQnAqXzhCgD7b/XANTAjCScZ1UwI19jO1eAkWga4=,tag:rd23KR2soSYiOvjFggVd8w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [],
"vsphere_volume": []
}
]
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:I0eBmg==,iv:6bFv/TdR9LdPKgvXCqcJenE712mOVqIEZM8h23ncwXs=,tag:AJqcIOcUWD9QYpa1Xc0Pkw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:/PrFRjXA3SXzHSC8/yAwXSpzXHm50jmkEuLQhKl94i1jDhWQ/yWDziQZO1ZPGu4LrBnGSlqIaU1s2yiKd5MhafSiD6LN5zBYtYi1NBxkRepj8PaDnCDp5E9irI/k9vNVeJFn7F7EG9QMGV+2cNprIwx5LMp0pOJmoB0gtx5gZO3kR97Br3KXt4sBSM8hYr/J9J6Nw6N+XEjsyLojgsEwt+k6dLewCljSZpm+dw==,iv:sANScmU86NpfcW1L7sPehjrqsGQrC9OF5hSq8vpr/24=,tag:0Y8fIQDgAf8zhvzo1q/9Rg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:tQNUjz2/gmHTbYEmXLoUodbw6D67oKWWGMg=,iv:KXO/AeTPBtzPMW3CRLh2TCkHptJppwNjK2FfeWO8tzA=,tag:hL8+RnpBGo6YUruqpjldlg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:d+XW4Rr4LA==,iv:v99U3VzMRSr7M/9KDXzWHMG4zk4Aeq6IXU8GAyx956k=,tag:37ENLaJTO2leNmHMfyy00w==,type:str]",
"type": "ENC[AES256_GCM,data:2qG12unUNAHi0DlRKpWUmVSlHvs=,iv:vfK9M/AFFsMoouqzxvyzeJnoz2idYygbUgpXE2Xod7U=,tag:2o0VIhsPH44AkoYbL+h6bQ==,type:str]",
"name": "ENC[AES256_GCM,data:JdwDv64=,iv:EZeqt9xRKy+qUn2Rx+kToFasfiBhX4R3ss92H9g/JZc=,tag:vuzFe56w4vOPCOD8Gb6Wxw==,type:str]",
"provider": "ENC[AES256_GCM,data:zHJEMIUBKL9fEqwiDoGUadgtL/1EW2ZQQlvbTUPN/Xz7XNLvkHqZhehXbcxRsCcMyQ0yThWr,iv:LxLkZ4p7IqKqBKbhkSObjwxHtMYl0dg6ew0YWaFPyhw=,tag:De8LdGkcdlo1Ya36EmNYYw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:4g==,iv:6yTDvUrllwaisXy8NsQge7sovQDoOTve4QTqSQ6IBFc=,tag:bMqUloDURRVIz3N/Hm7hcQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:5TLB644=,iv:2yaT6Qb3w6NH/hquInUfC4WHIxn88lweJ6DvwtqwidY=,tag:4syZQPmAjeWVYfP6vldzDg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:kA==,iv:g30CpRF6eum8aTS4b0y4ffISKXluqCA0xoQYVxeLICg=,tag:4H8ZtwGxHuGLt515/6Y96g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:EzTi,iv:lQPJf+VZ9A7XkfhgPGHCsaez3XnY2oOtptnRNtPGMI4=,tag:18R6C3Fa70zBvdqJlpNhmg==,type:str]",
"istio-injection": "ENC[AES256_GCM,data:jSocwknkImE=,iv:5Io+rIr7hH93nyTwCC1v9/5ItPmclySj276hh8DCK/0=,tag:J3xnfM2ibR6NHrUGDwULgQ==,type:str]",
"tier": "ENC[AES256_GCM,data:8tsykAU=,iv:CunxoFgfh1NEsN4jbHkDa3+x71gxHI687gDb98C2KN8=,tag:TFPQV0nx3PkR48/duVbrpw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:L2UkP8g=,iv:xziKHxjR8uvz+HSFIiCDxjBWvOtZKeGuMbfbsur6D4I=,tag:iA7XzD7Z0W5Z7W52BvUa/g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:fX2gPtmWAMsG,iv:nyWhE/rDitLQJHaKG/W9qzUy6yc8i0yNXo8KlQ5Anxc=,tag:CsXnGmzSr2orHc1AtIrWCg==,type:str]",
"uid": "ENC[AES256_GCM,data:5VFX7kzf5Bxfi5aJZq/cVDsPz2NktmLEFc4u52gMouL/0AOp,iv:nAulqXooRNEVOG2Mq0+xwOsn2UAqWaHN6Brpq3bOqRw=,tag:f0MUmblEvTJkntSwLlJkJg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:i4j52Nw=,iv:QSgbNnDk8g/kItpXt3E/wd4AntTCJRmlSUzIMdROZXE=,tag:FRT2oZqOYX7ShRdCmhi5Ng==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:YgrZ0RXPFbQI3w5uCgougez4VlDa+IVgHXPq81DLvySgCzku1D9z+Eq0Y+hdgjEwt7hkiwkVIHO7UvL2f/oIyWwyVhlYEeyz7HplMhCqwrJjuP4D2wjzcA==,iv:ifcLdWD2JKcU0B88ZYGeTHJxSdZpgtek/p420Jh5gSY=,tag:XgpydEPjm4r+QESV/Ambbg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:Aj89F2Va/w==,iv:bx/e9wnf63F/ePJ5LqtPDFlx5ZwHnJXx6pkfiyQXj+I=,tag:dBHP/iG5bExBW89ZOlDnPA==,type:str]",
"type": "ENC[AES256_GCM,data:zsmiedeoEdcS5s/6AasiX+zj,iv:/C+GiinvKpE7z7lHntdDsZ628qtLCG3Wp+zexC4/CWc=,tag:mydE0Wzv7KfgslTBJ0CsPg==,type:str]",
"name": "ENC[AES256_GCM,data:GXkNwxk=,iv:TUorP0apADonbX/aBgBEcRSwjDnN1FLHibg9T9gEKPU=,tag:JjuYYQ2qp6TKTOb3+oUg5A==,type:str]",
"provider": "ENC[AES256_GCM,data:2oalw31ID0vXjgGu3xRsFu8KjOQigN11N9PyabowHhz6efry8NX84LD6s0iduKYGRnftgaaZ,iv:VVtk4Pw166iq846hlZkdnMHvT3YLt2lmLHwo1lUmGdM=,tag:D681zCpXd0LQyoAGEJLhUg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:7g==,iv:BxdRH6OJxrJ0ui91Wa/NclJRiLNAkJFlF9Ophm8cxLQ=,tag:uz6QbwvHMwrA4mZvayHlmg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:FcRY/aNVmXN9A3Y=,iv:+QEU+JyGW7am3JWZHAkJwUcS5g/vJq/xfRB52tU3d+8=,tag:GYOBAqB2FDnfBD0HPzZ5KA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:8Q==,iv:XB7MWgG2yl9p8oEkNYgjMHGzVbhSRdh/qYXO2+pxffI=,tag:GRH/03eCJCIrxwB5eRcXeg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:Y/qpnxc=,iv:Vsjtm4vURgwaMHk5ZPcFgKbtPWA/VqRqcwwotznKk64=,tag:qzgFzNw0bli2uYDZo7av2w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:3a8yvH8=,iv:tplcUX/GzFAPTxun5sAzFe1SSSOUq4aEnww4H2i1zV8=,tag:dRs8ns7zEoSu7ysqldlVag==,type:str]",
"namespace": "ENC[AES256_GCM,data:rIsncSI=,iv:L4r9mXbee9vzedV1+4bE++Y8CKtmeKTIwc6oFZDxUS4=,tag:3zDCRVE29rm3GvANWD2NbA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:J+/ZxWBgzBVa,iv:cOt9N0wLGI+v/nE/hmXA/q5R284EDTUToirtfnP9Hu0=,tag:zREAboqMOaLq6YVgeoP1Hg==,type:str]",
"uid": "ENC[AES256_GCM,data:G7HABM6uOxxkjuOkxP16hYA55q023uEJ9Tc7iHpbgfA4n6AO,iv:rde+eGQlxPVA8lyVXjkZDKL4pE1m11EeyVyd4GgEBEs=,tag:c7pMJXuUyqftvwsZo0IGHA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:aiRpyQ==,iv:WmpxUZGILPVHDiP7LrJ+gVqFJOIfLl3KhEIAdCmNmy0=,tag:1e3wnXmAH+4/xmABTfGoaw==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:gxyy8S1rhWBi4Saz7Hs=,iv:fARIGIF6jsGmsrfGasia7x5qaStLCraG2FlMtwCfZA8=,tag:80lEVtFlc8y47YKIDJHfZg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:3fSByv3Fh8I3TXCF4WA=,iv:rlgcqdyTYjg2e4vAmoFuaws2PiDEvWeYRpgRLLLtXmE=,tag:mWJ1RQBsGqz7rfNFiu8tEA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:Ig==,iv:CQs2jOQWYU/jh1ETpq9+5mI+/CNJ3bI7z08HYatnEpM=,tag:NBMCY62SyRwTPFsFSuigPg==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:K4npL8Eiww==,iv:erZSK2lT/kIHHkIXQNm4iv4Fvl0pPuMhT2CknLuw960=,tag:3jHUYhJUBoVAPU3mXw4Vsg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:KDb1ew==,iv:AU7lr90yLywmljUw9WQzhY+eUivmb6D9I4yl71nveTM=,tag:Q0DTO19mhMIfbQD7tnVLTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:9f8vraDgTyFfOME=,iv:+9kN2MQHxWIyYeJEOSg8goEHO+8yYu8NjFkr2XInKOM=,tag:/Q3u5qdteUk5g5yg7b3sYg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:XlyQng==,iv:LQlOP4XsdvR9Has+gXx7/ZwzgLq1xMYwL+HytT0XXfY=,tag:Q8DTsjyJ00PGLCM0leoN0A==,type:str]",
"node_port": "ENC[AES256_GCM,data:dQ==,iv:ZCn290dP1SJfPFQsqt5c5vGTzm3Ib4aLzD8hNYQECFE=,tag:ys7nxICEqw5p/xawXoIRQw==,type:float]",
"port": "ENC[AES256_GCM,data:Lks=,iv:ej1aNV4JGATWhCbMzB4AOVgmeIpjnDXNWtjYdJBfl0Y=,tag:1Mvk2VL4pKkmRiU42wLGLw==,type:float]",
"protocol": "ENC[AES256_GCM,data:yGHb,iv:LeAFpXI6KK+J/DsUb09KRtLZVpeGyY1B/1TCBuQSoKg=,tag:Sp2O9H218eUSAvf7O1OgEw==,type:str]",
"target_port": "ENC[AES256_GCM,data:J5zQTQ==,iv:qmyZ++DXXRgCRcNFCqh3H8kEkLtno1iHZ+AOeoijkLk=,tag:nviYKflQAHKtkikZhLwUpg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:dn0QQMI=,iv:HcENbRZtw9fQ+bD1gAW99Bx70ayEA4xNyY6b57uJxhE=,tag:siuq1Yy/Xl5j96Jfhg2CPA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:NKDMygY=,iv:uFuJ6wAiiIwaYLNwq2G0gPj/D6sSATRvuS6woi3Kt1E=,tag:EJYuEilF25Z82ZfjBdInUQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:4s4bGQ==,iv:kUEo7XzzpNPLicJYI/EF7DcIGDW3Vp6krQacTIBmQEw=,tag:5y/wWs4EsMQxVPVZVsprBg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:H5wA6s9Mx7W+,iv:NPZiaD3NXYyxUzd2vhuw/S8C+ETaE9wmfiQcki2Ez1M=,tag:ApWAOdwhAbSqjhvc/eiK8Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:OxTXAw==,iv:zJua0HpOTJ1658uu678h9rJ7IaaTW61H7UiWE5TodIc=,tag:dyFMX7lF+gQRSCS4EMyoVA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:6JSLRHnpnXeiA6oEPAcz2JWBMgTYha7AeSQk0C8MLf25qD5cgUOGb3k9uiMUJZt4dEGnXY+CkzNPF1O2NLbsbRl86ptcgderCFUbsT0VuF/njyCJCztWWAVyzhD7m5evBrGiemKX3MTXgfE3uU0BlwSd9Zs=,iv:BoKY90pAgcNsKr8w9HyancSf4a8KtriTgcIIht8pJNg=,tag:ONPl+nOQmnk1o9JRvpaf6g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Qyi56rckrSlLrZr1ZPtHmy58DED5NEH39fg=,iv:vAdjZySUBDg22mQGCk7A8ic5Kd9u8280h9vZ30il4hE=,tag:cVE/B4Z9zQ/NWLCbgLmfVQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:FAHGmQZSDROQOxU5hOQ=,iv:dF6c3ETG2SaRBXUgWq+LDvx+2A53wjTueiqdGKbwUTo=,tag:DD9+SOgFRcgFpY24bA6+6g==,type:str]",
"mode": "ENC[AES256_GCM,data:QvmuZ9GjLQ==,iv:3y8VuVpKcMoLv+tw8V4kLrv8SVGml1OgwdbiKiZ5SE4=,tag:w/QWqvXltl3oTo2UzNfelg==,type:str]",
"type": "ENC[AES256_GCM,data:8h4EXrlljP3474FiRSX22E98kj8o,iv:GZ9bgUqNZi5Tv3IgDHA/9GLMoXhgsaUJuv+bl0MF+gU=,tag:pxVD72me1r22LgL5jt57VQ==,type:str]",
"name": "ENC[AES256_GCM,data:0MvCIZ4/ORd453vtRoFP,iv:yqKaTdFb4RQVD+NMkrlBuMshHoExtAM4u9wz+FVEsHI=,tag:sBGePcbvLqj/WJhMIYEfYQ==,type:str]",
"provider": "ENC[AES256_GCM,data:Cx2aGeTs7NPketeIUzk3tZqYqBT4hrfimxtRFctgLZpqQzXJu3nH0IQHKu/dv/H0vI8jQtGw,iv:dpV09ZHyxLVZpNtqEUdWCyU5JiQwuCyK9W6Wnnz3OT8=,tag:rGTkc/26+hlP4da08z0cKA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:hg==,iv:vnv9WPoMocUp6wgdUUyV99C0U650TEgK7gRMRjHxkPo=,tag:kIBHvW/iCL2XOMzPmTro8A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:7kWfO2pjhAnrNy8=,iv:NA72qk8059UJJA1iiH3g7GfjwEqSDHnE0on7tT+3XFg=,tag:9fgeh5DVQv75Ber+PSl/Ag==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:wy2ffhrP5m5Z,iv:/lNTGfRNtUwEDmpLDkrpULqYoOlmidIfLO84w8hqiNk=,tag:a2BwWToWF6FVV8DfO5Q26A==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:2nO5hKzQlJkTLY1EDK8fuNWs57iP9DfuTwN+jXjeaaB2f4rn0Pgg9AFxQPFZmNCnsS4sOyqxVsw/v1hb5vb0/SqxO8g1R8yLXFGoTXLERMGzEfjgdgsnrwPAH00ZPrUKcJ2CVpEJ4c5xn1aMTHAoJGjpMQk3DpWact9FOEwE2RuI85AO/pfjPOyoIJgfvqzPg72Z6hIuLpL8oBZH7HCDYdXdwNBseWjU/lR4eexkc0Mu/SF7nC3XwngBE9m6pZ0JC1bdoiVy3zDsUrfZDEcJY9LJXPx3UmqvyT3aAjT+U7MfhdrBRGW5431ClIK/asPSLG9CAGH0eDldaKjtwyQ7bFxIegu6qpr5iwf2u897HwbdDaRVZrVMzLAwav/8JZ8V7jYX4u7fsci0yvJxPZulGZQbRzJEwrjFnLoCNx+3gQoaScFN6829uQ==,iv:8GbO8NTHh3hMH+x4tSiyDndq/xDYdwp/+Llpql/QD5M=,tag:wxOe46czKyYYYoeg2nCw8g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:/Q==,iv:cMBfX0TSGkUZmuKk3ESTnMZxzsQfKxOz7i2ecncaFYM=,tag:KQDlAoKYRk7+XIfLl9RZ0Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Y1gP0vk=,iv:XOl7N3d3/oMy7wyg6BdYs3qh6/8w9TTVZ4SzrcHE5GI=,tag:ZRfwf/FaiYQjuIcaz1QyHg==,type:str]",
"namespace": "ENC[AES256_GCM,data:di4o76Q=,iv:D5BVdEPpIxcbhV/Dc2Dsk8+CUUdpFLTG0tpNFWjdjBM=,tag:kmGQYNFcf4lFXbN05Gyvlg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:gRAIBjSORD38,iv:RRLQoAFwxpM5R1DRiVGjpyWcTLL5enL0SKXP7OVPT0g=,tag:v0ArzyjfQ7mTur8wu5rbHw==,type:str]",
"uid": "ENC[AES256_GCM,data:CF4rbofHFEBjIch8Lb7FIC477ROuIL0614KIRhRB/LU2hUiB,iv:d/f5NGQ+tf7qwlO/ysrA0325ggg6A3/WTI24N+6LHPQ=,tag:9oxyZcOiaAUsuTmozvHF5Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:ejxooBnqEA==,iv:il/vx2UsCX3YaydxGQUH7Jjq7RtbxTnnnxtCMg2Y4z8=,tag:OQeNFeIYBx+qbniaZbJ6jQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:BEol9mtrOAxHoohk2HTce5A1vQCK,iv:geqYJr7G+x4a8fOsV0FXKLpxX5MJ+qKoeAOPnRmdG2A=,tag:m4HMlRVfazjS/syxp6V4fQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:TLxu6hY=,iv:E3M7GjRuC5vXc4BqHEcZLc2k51XuEXnsKKYHPX6Z0Uc=,tag:bGJUzSyOQMg8dif/Li+N9w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:d84=,iv:e6IZRQr1nRCzBkUqBsFGT1i/bHz7G1TWFZXChgzvKDo=,tag:v5eggbZ+eUxG/jzAhGTFZA==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:8w==,iv:WX/KMUCn6pRnpFGR8/HBeikkiJVIjoY6Z97FGSFtzVI=,tag:wWJY+PmIkEAnVHHwCigVDg==,type:str]",
"path_type": "ENC[AES256_GCM,data:IYeWG7ADOpwe4SgBFeQfS0bOex+a1g==,iv:RoHZkpOLvllPGAiAea2ZShuWEeVt6dVosy5Y2nw1x9Y=,tag:2kRyYRsa/k7vH2HidkrwGQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:eaRffcG1rh6JOSCKZ4JrKHWAn9zB,iv:1OtTi0z9uG36vUzt4ERHfRn+mnA6PcUEoOSZJHgJtlA=,tag:hHFnnjtkq4d4Sli8RtakMA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:/AFwWcU7+91KsQ==,iv:pGTBbukeheiz18djnrg2pyukbHF1ejuFqkcXD9K57xg=,tag:NNy9PUo6HEd8Y8WnJtk+DA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:kXsRWuNrJbXR5XY=,iv:An/EmxfLmC3+AK9ZuGx8ulZ7+FzPTj0g9IrVmeS5dsQ=,tag:xbjb1wT9FBM/TQk359Mxjw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:HLaSGosFqxg=,iv:2lNt7aSaJgv/pLUB4mOEXYoZPxmop2CHxx897JtQCZ4=,tag:4aUJlG0eIcjdQs8cNhiFEA==,type:str]",
"value": "ENC[AES256_GCM,data:N2TH+Q==,iv:T2vX1wThjV6E6HwfvomcHPlYa2LmZaou/shAKAwy26Y=,tag:wXdMZxmc4W7ap3DmnF1vjQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:omAq7WQ=,iv:g3/GLhsS/mjj6pPMb4HCom00+E+IwNCTvrsPfQBroyM=,tag:7TQqSkbSIYpcDOSAKw4XwQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:+w==,iv:lJeLetljzYD0FbmOgLMhk1w78Z9TOWBX1R/k81W0rXg=,tag:2W1OQkSfACcsW4BaXe9o1g==,type:float]",
"type": "ENC[AES256_GCM,data:G2keDMqQ,iv:3eZyDvEdRUfkD+/c+taRkgb4MLXt7/QYDtnnNiKfzbY=,tag:ZlF55Sm6y3WjsF+navqnOg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:OQK31TFHiaA=,iv:uLnLBIncup1E0fwSFWDg+KSNwSPvHCo3jwEg5JOCUKA=,tag:NF2gizEp9sNJbYcqLfMOVw==,type:str]",
"value": "ENC[AES256_GCM,data:Vh9F,iv:UgrGJfICbkit3+2ByRLCdsKD9zWfYemfJVwdfVVBSrw=,tag:oVulz0d3fBNCnL6PvMLbzw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:NbUEsI0=,iv:xTLHLAqcmiiEF6YaesxJPuxvYP9VrwbcDcONK6lrKPM=,tag:9M2rPZjeT64UN7iX5gFlmg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:MA==,iv:gJkLq8MiiiFS5ND8mFjLuK3oEaTOHd9hs5zdjM9N3aw=,tag:9Gv1BJ4bY+qoam5OEWjX7A==,type:float]",
"type": "ENC[AES256_GCM,data:zS5xykMv,iv:lH/LJCSaskokyPbd3gFunP2ZEPL6ohojsJa1+VkY98I=,tag:l4r1V1JpZNt0jepcDFxX5Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:/6d/9v88fSA=,iv:FW3RwytsUsGcKcTRQCfzRit/hE5Wb44XOEduvwx0Zos=,tag:DP2TAdBFQBky/QI3t5PlXQ==,type:str]",
"value": "ENC[AES256_GCM,data:uHVbHKbQiiXzr1o=,iv:i8WzMaGs/X49KCmVqb/NA5cqlIcqtMfytuXDgr2nSQU=,tag:FyA45N+Dqws4V+h2NEu8Qg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:Eb1AciNbA4XwpDDBIlC4xplqs94OMbsTBx7ZO9Kfo4W6mBIcT7Oi7RKrOpfTBdhvwYxX20xNKG3ZElZl0j7QU3lKCVyTmbumo1HoxPVnht4S231iLg+Sju7FmFEue15Y1g0puFRKjo/mgblofLHCn5jXLXQgtjs7,iv:aft2rq220iOi4RzCfIg0IXQhu5xTSYRgWArG020piZU=,tag:kD4jf3LHZreJY0sS2ojIIw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:hjeFs7SjFL1KrCzbpci6vlEEeGjhAMwVKHM=,iv:69vC1WsIa93Q+pErO+y/84sGdtBy6lu98k63Gij3Nuk=,tag:ofJ6lv/YkBLUAyXW7eKIPw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:YcFQkL4VKqOdt7VrxPgYo+k=,iv:2bvndmSfDHHPnpmLT/I4ijB14+d+JSiSk8mEise74i4=,tag:rdXpQIubH8SpiJHYt1Gd1w==,type:str]",
"mode": "ENC[AES256_GCM,data:Em4h8V+jMw==,iv:X1sE1wH/0lqpGZvwdKkq9sAuw+FgNfxT2D4cfsnJMEI=,tag:DeCNuoyhJd5Vrlh2WcAd7g==,type:str]",
"type": "ENC[AES256_GCM,data:fAaSABzCfStc8l9MSpk05jw=,iv:0stWRcVLOmcIcevSvmkZs6+9ZRu7L6WwZ1vLovbeefM=,tag:WRDGEgU/eX0Oxv7BZhuNEw==,type:str]",
"name": "ENC[AES256_GCM,data:Wqj0+Vyo+cXNag==,iv:oYUB1GzXPJbJF10BSAvWLr5Nb7sZmJPSPdbFVCwg4Ts=,tag:cMYVqXKfc9TBPWysKNg9/g==,type:str]",
"provider": "ENC[AES256_GCM,data:pK2lqNpinkP+uq2UCiGJSDq0XYGC7aMTHhqe/LpEbRBQCwg7dKGg5bJQPovUuxqdI2HnhL5A,iv:FJr4jhSYFSt8W+6KIcoEbv4BxUq65ek9LXts7hx3kgk=,tag:rTUFdXCo7RLFtbdoFgw8HQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:zg==,iv:PqMLr6hmhecFLaQFH3XxTfnCyQuG8r9mEcsZrcLA6c8=,tag:BYsbMMbOBQbQ76psOBwpLQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:Oit1HgQevCzixnnn4v50neuLYIDt46KGnrXnjetq6cA=,tag:P4Sd3sX3UAEA3Ybf5g99FA==,type:str]",
"tls.key": "ENC[AES256_GCM,data:dCv/MKQP5KBF/XsHraFU+b0QdElJIwjky45SWSHP3YScxRUOdSCE5q1YRh+hxBMKjv1dlkoWxzGqrCRLdaiQcUP4XOkiIbeBFVmqDp7BFNCnopZG3nrM6+e1dn1p3eltvoyAiWFYcRLxHEYNMdIzZSifCzcHrlY+qtU4gA/lAoahBxyWxoxx4Ttegw5qHFcChPr4NgsAFrUy4YppasOnh5YCIw5MX1ydbOHaw+rOVzWIdBg0VQK8K1v0qe8AQDP5DMOpwswy3rkFd4Ab8s0wOA2VxxNHVCNzI4e41gWH3J9buop818yr9W33nTWEjKYclw==,iv:KPm0TxDKJgWbge9dAsvXLtwwjf9sKAAF5/1jH+8K4rU=,tag:ClZ06qbSPnONjgjFSE6phw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:86z3T9ZJJ+tPjAeQtuWdaQ==,iv:EYiXQq2x+aJVpjf0Wm/Lilm0ZVJgu6nj3zu9l8ONN5M=,tag:18TCl9OmBLUH3vNVVZ+2rQ==,type:str]",
"immutable": "ENC[AES256_GCM,data:QSBIO3A=,iv:4VrDUjhcSjfVXpWzmIS/Hi7ayEXlLXigj1WLZb7z0Gk=,tag:lXB9UT0sWV6AkEh+gnjgMg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:sA==,iv:TztKLjLtV1RmF3Gww2YtAMRcWTi4UcG2SWCMDrHe8qg=,tag:rC6MGn3aTxZDJ4p963X8/A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:MpNXkqynH0d/jg==,iv:HAXSA2X4ngdMRDfm/PIKA+igldUb0n/aDuPuLUNIavk=,tag:osiP4mcQAiswiPTCMubInQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:T0Jd6e4=,iv:PZnPZZhXYil7q1RsSs2k4N4uNDkQxZBukCacwHW2uPo=,tag:UEpzhIE7h2y2/fxgd5v8rA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:0QtBgWVRapze,iv:i6wQjuIEYSPOHMbxzIGNhLx0AP6vVBe0pMwUaQU7668=,tag:epJ2tqrmzNXhV7RMCXZcDg==,type:str]",
"uid": "ENC[AES256_GCM,data:I1C5qO7OIIBPx3PStRmcSi1OrzoiOXt5TDpRSfpINh9K/2Cp,iv:1eapOGERZaIRA0+QM/0YSgm5krX1sYAs3CdaRl1tT/g=,tag:zsxcSdvJ7EP+ryjZhKKTIg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:jkirVQnUeBgYEygtr4aKV0E=,iv:7WjB77nKKjqSGcejY8159G5AifH5ZRAX19llRWKsymU=,tag:U0tgmwgLHPxpslOx0nMrWQ==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:hbr9hw==,iv:QiQlegewCHKQepuR5jFu7eEHl97uPBmi562ecEgRX9A=,tag:TsTKBhMWTV6hvUj8gOr5GQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:EVLNvLXHHAc=,iv:CHHVK5plbLeFsxs9MMjLW0cQgp15fTX9epabHlNVv1o=,tag:6qRKhNrBySNlCp4gb1IQyg==,type:str]",
"value": "ENC[AES256_GCM,data:oTpUzCK+iOU=,iv:UGK+v57HwBjF5zetPIgssCMjyc9U9gfXiQG0laZjG60=,tag:UAL0NhmNK/y/sYtGVpj+Zg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:j2UbvZk=,iv:ImOLSJBhyIeZMGPlVV95kKtYEGkXg3T4qvMvvKnDELQ=,tag:uihJUAhDnqBJsr1GO6SQWQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:dA==,iv:GEXHtO3b/vzNXC6nSMzLdmKmuCDvf6OoY+l0z8Zb64s=,tag:38ulS1yuOejQKTbcLhD05w==,type:float]",
"type": "ENC[AES256_GCM,data:817vxEtN,iv:q3HJucJ5JGKgYcguyN05uq2c50IdYIU3jcvNnlw5dWk=,tag:Z9eTnlw3yrjkx3O4HWho8w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:QS+GW4GkaFw=,iv:0+FPxFqQDPpxUfGI9/QM5D+8WZv56EbY6M/VQXPfF7Q=,tag:qIFpwMzGzRAH+M1e+whEuQ==,type:str]",
"value": "ENC[AES256_GCM,data:h/NdMg==,iv:9eAeuvXy2kqG+Yb0CRxbOol+sx4eOj/v92nidmnOq+I=,tag:kaAbD/HuMGwLEffqUFCDDQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:TLW8FNzbehTmBbdP1O3CPaJAdBFCEu9MPkFVjn2RhgtHYo9CBKts7FI52RiLZCx6dIPG1wEbRbFky6cmbr3CdNNMma9CI7SeHkKjmEeZMU4dnLuD,iv:NiG7IUNOisyT7EUdbG1X/ZQxL4DRf6UTGc8lerV0Y6o=,tag:NwxDgutHYeQlq9O7SzvbWw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:cKbmAorZtrMkl4j0iQ3EXGi21hn9GUcQQ1g=,iv:5puKl7j8BCHHEZo35sH4iY2ehnY+pcvCtTY1fD2oHdI=,tag:pxQoCU9SXe6bRhzHkeL9hw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:11Z",
"enc": "vault:v1:VIFR/IByahwuuk6M0m02O0W4yxvqrdxSfeiaPNC9x/b0j0v7ihGyK+4GzbAJbD+NpRZTHCedHZoECANs"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRDFjSjhuUmJSeG1OWmJv\nSStRaGMwZUZicVpzamVXVEZoemlwemIyK1QwClhVanJOV3JlalN0djVEak1lVFdC\nNWFxemQ1djAwVlpuMG9sSWh1S0tiak0KLS0tIGJTeWJhSllWMDVQakh2TjhaeHhM\nWnVpRm1wcGF2WFUzemY0djJMUGN2VkkK3ypGnscVK0fjq/MvOGAh6m2rFHC3vATc\nAPWM3r7Dk2M5OA8ptuk+37Y4vmBWFyFRdeWsfzdxFEcDYU4ddP8E7A==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVGtjNE1SRG1QZUdjcGZs\nZ0tMN1lscjA1RjRZNUg5azFUbnBCSnoxSUJVClRremo3REc3NEdUSFVsNkR3Mzha\ndU1kM0NUa05sVUZoclRGc3VGR1ZwZ00KLS0tIDRZSk94d2owU1VJWDQ5TDdVS0xm\nZ01OaVlsTEpySTVXZERwZXRBMzZyRzgK6cNPtaz9KAQFEELMMMcw6U0s9Ux1MlTA\n72TCpEXuWOCXGE31Hk2x0lcQHtVHOiTC/v1IFrrfMaPfS4IFc+P7NA==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:11Z",
"mac": "ENC[AES256_GCM,data:YZe9SMeq+GFTbKFTf5jSzPIl0M3xPF/q56BDqDIK9qdLwzhBYjEK5ATmpcOet4URTcRKkKzXwFXBlFJVbyOocpxALaJZYVdRVeyZkHibfktOHPSctNOP+XQ2u3uVneHT3eAxHOh2SGpPUQ4+KBKCafyEz+U4/PF/8s99uih2Fn0=,iv:BzelmMCWV7WPCrAyoY/Wg6lvo4AD7DhVAtj0Pa1nr1g=,tag:b3s1LcUDC09QdnnQsV3Icg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink