viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/descheduler/terraform.tfstate.enc

378 lines
41 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:Pw==,iv:n29WyQ/alSXziifDUFuBSm6lbTHFn72IaQqHT0E6nMs=,tag:Bz3/NM9WW5VmlC2U35m9WQ==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:0Q8AiFQ=,iv:8++HvYzbxRYTtjvoa+aruPlJozQshFGrVPhPY78V9PU=,tag:ubzZEKs4rzKFNxYFeZ2Bpg==,type:str]",
"serial": "ENC[AES256_GCM,data:0Q==,iv:kpMCvtgSw8FzJfBUQh0mSie1Oh5fLTvuxE8z99VJ+W8=,tag:LVEQHgI15nWFoJq+KlANBw==,type:float]",
"lineage": "ENC[AES256_GCM,data:zuTx+qGm9hFDfdpYhcfWxvY4KaEdNVhBlNpUwSt/Nxvf0E2E,iv:wJFW+4Qs30gq9gvqLmkZiNdwb8LQYUp/keaVnYclGk4=,tag:rv204/6QQCxYB1rH2iqS8Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:y+u6hczAeg==,iv:nsUQfWJggTjwukGXp42UNKsZUpeyragzA7274u1YUMA=,tag:MlVhTOG8P/QKcLpg/ZKvaQ==,type:str]",
"type": "ENC[AES256_GCM,data:/IZRlg90T9jtk2zn,iv:rpCKNQuYVjbIeixbAWWrkNot46e/Ra1j2uJzwkC5jck=,tag:0YCgQFS9nLXDPl5cHEN/4g==,type:str]",
"name": "ENC[AES256_GCM,data:2DCTNrIbCxF9tEk=,iv:vLgguOymeFhn9yJFL8R1ViUA8zKtGIlqhNIrC/vUMbE=,tag:YaWFV3tsDE612ncgxPqwcw==,type:str]",
"provider": "ENC[AES256_GCM,data:RENMhA4fsuiREyMX4VASAzY3qp7LRozr/13b5Avw3WX4HO3vxBk8kmXNrvdM6pLZ,iv:u+oklz4y6pSJEkWsc1ofkKACtlMBAHq7qgDtDqa1bWY=,tag:3njPj/meerwdohz6NS/jyg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:NA==,iv:iuzcCANrJY3RTgL5lCQeRkaAHib7a10RQPhkc5ws/N8=,tag:13w4h1WCtEHhSAKilbrK+w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"atomic": "ENC[AES256_GCM,data:2o6G8ZA=,iv:m2bXaawpvwjPzPhPL5T1h2EjVaE5y/rnWHR1HLmSf40=,tag:HjQv4VbbFkT7Bm7YOxT7yg==,type:bool]",
"chart": "ENC[AES256_GCM,data:fGQWWrDW7DBSFu8=,iv:ZXkfb3tGTB5T//zACKorBdWIDdg0xAWlqfJlvvHQ1YU=,tag:hqvY1AFJU7aFIspw8n2Rog==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:O89U4Yg=,iv:3eldfUxUbc/NHOmEL5BjWhPJY7I8Mf298DZdt/gQIYQ=,tag:8d4CJfa5SulFi+mF+mnuDw==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:BX1q5Fk=,iv:4VJxAHGC6rQj+u6/pEnNMfGoAutYi9YYupMIDIKb1rA=,tag:RbE+/a1sRsplxND1jhHnjw==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:4+HavHU=,iv:5E8Re7WyVY2V89Lv3tlovS7/cXuadcMac1AVmwBGkxc=,tag:bsF6S5RloFrmnqoL8stYUA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"description": null,
"devel": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"disable_crd_hooks": "ENC[AES256_GCM,data:VE+7ads=,iv:QpWatE7Pkane2OUdfvKJXo0ZimF0yYKvMj/yr5AlNps=,tag:SjqJ0DivwbI4V6tuFNY5dA==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:j6TysU0=,iv:fSUqKTcOGRZFcKevhsMz7f8UWo4Oi5Ygqv2SsUfh21A=,tag:dK3Mwcm2/cINVH3+2ef6Ig==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:Kedjx3Q=,iv:6zlH1ENwUZvWJWiii4u4XU8SnSi919QQkEALlfEGjCk=,tag:UlnIhm5cG1hLmfZEQzVZ0g==,type:bool]",
"force_update": "ENC[AES256_GCM,data:CR1iqCM=,iv:/tr98wcOmCrq37qh9U/tMj3qttw5zm/9Pj+aYZBFDUU=,tag:iLIrnHAO9ucis+SF0CsXgw==,type:bool]",
"id": "ENC[AES256_GCM,data:zoEworbgH+Ons/s=,iv:0I4a/1srqdvSGn1o6aeo1sxyMKnpcbNw7apX/nzfLXY=,tag:PatXYZar6k6bGIdv0o9r6w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"keyring": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lint": "ENC[AES256_GCM,data:9GBvl/o=,iv:WeQZNYAUUS5PBVkESCYEksf0UMI9pMvwcp9t5vlDM+8=,tag:D7RHKJzl4fd3qxGfQr70Aw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"manifest": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_history": "ENC[AES256_GCM,data:Pg==,iv:dgkv+oP5wMOoMrffLoPhNcrUXiFkJLdQ53aZGBNtbXA=,tag:gi+FjobaBtovOaw0g+iS1w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app_version": "ENC[AES256_GCM,data:apPeFLPM,iv:q9hymw5j+T2EImhc1r1FpikGAGyLUFqT+I8wwVBbFgY=,tag:5ZA8a+QO/irnrPn3WP2JZw==,type:str]",
"chart": "ENC[AES256_GCM,data:1aNJvc+1zwoxObc=,iv:+9YMdZPnxrxlF9M9/673a9yh4WpdVc09PamBHWuT2rw=,tag:sfYX5jWzn9sr4hcXwca8Rw==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:3T4qW/sH5TTjGg==,iv:Q0nyuVhTM0rY85Js8Qn4Lk6I5nmX/FL9G5HizvlEBpM=,tag:ftTCwZiF+t+5+S8yGNNHlA==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:LD7aX8AcZ8x64Q==,iv:jz69Ngq7HhxppnSbnhAZ3Btvds80PGsBl8TLKnd49PQ=,tag:M/hZQzMJqnzJNknp3Q1vUA==,type:float]",
"name": "ENC[AES256_GCM,data:GquFk93E9LqcG/A=,iv:8Iwo+SwFW0YzsGgCxpDDgbTe1OMd7O+v523HzbtLCUA=,tag:niua2PW3UBfbsaguIQzfLw==,type:str]",
"namespace": "ENC[AES256_GCM,data:qooGzyMcblmj8Wg=,iv:Vt4yP4YbTXL/rGs9H4M8RvQqBAVD7Ee2+IcLwqS4EPU=,tag:BbIFbVHuw4vd3RIhBUQY+w==,type:str]",
"notes": "ENC[AES256_GCM,data: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,iv:6sovYUp6yF7ee4HCslr4gWuBDbjRxja4NzVaWeftfrc=,tag:BwkOWJwfXAaCTwwuq2oM0Q==,type:str]",
"revision": "ENC[AES256_GCM,data:Tg==,iv:2VRrw3ZUKbjGPReUAtZBc4O07cs0auGYNVeaXC+0GLw=,tag:RnOhvV9UISw+zbkTB+4sxQ==,type:float]",
"values": "ENC[AES256_GCM,data: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
"version": "ENC[AES256_GCM,data:8XdLeRP7,iv:yeOC/97FnaGfp9Tkvsl9bEko6lChMOP7fAkxv9r/8I8=,tag:mwYXsG6lxPNnqJ13As6U8A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:XajOMdq+qxxIA54=,iv:iNfSsBOedhVHpSqjiBKN7qnpuK9KfofzZ0UK+BwcrF4=,tag:1GjVm0wXKhQPgaKaHCvffw==,type:str]",
"namespace": "ENC[AES256_GCM,data:zDOpxQvYVZsrg3U=,iv:10pceEGfdkdapJh3u+0aBdWgYQKtiMOSUDGXHrcdOz4=,tag:lWy2Lgw6R/O+hwXCOYSSsA==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:JtLM9UQ=,iv:JbXOsCERyUEEnSywv1VdcOQsRccNdZy3heU+DmRIb8E=,tag:m+G7KtMxFB1iLIaToG8VeQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"postrender": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"recreate_pods": "ENC[AES256_GCM,data:h+Ga8qY=,iv:cxuolXbx7wI6FJBkx31/drfVItDakHoBezw/n0jD+ro=,tag:X9TV5YWctSDL2sb7oLAKRQ==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:3scuUA==,iv:V4XT7Giycg4weB70tykIFizgSUnYoKRRMnWPwYs+10E=,tag:PKpNfzMNu6qFZEQLjNeSbA==,type:bool]",
"replace": "ENC[AES256_GCM,data:tJDvNZA=,iv:WwhZm5pD361dFIEFi9A728xSSryxxlXBEjNMeI2wbnw=,tag:ZXUuUlHYuGlxQRIJObQG0Q==,type:bool]",
"repository": "ENC[AES256_GCM,data:kwpjlf8d28rzu10GHLXuH+x0A6i34ZjFBGhWJEnwY4pt7QjchH2yB6Ceo0USHA==,iv:5GjJAf4RO8fz8QOVtT9Zs5dn2UOLSo8daLGiTll1CEI=,tag:xh8cLuRYTnyTAGJHcIEqtw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"repository_ca_file": null,
"repository_cert_file": null,
"repository_key_file": null,
"repository_password": null,
"repository_username": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reset_values": "ENC[AES256_GCM,data:PFJX6Ew=,iv:dYSbRLtRH9OLbFw1uxvDTT1wrIamW14PepkHswnpPpM=,tag:aD8zT5UiT+6p92b8ipw7og==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"resources": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reuse_values": "ENC[AES256_GCM,data:8FTzTKY=,iv:6y+UURdTwPejfYVD91kmIwTqGXip2S74EYR1Oreup9s=,tag:tTxUXO5nrT52W0wq6TczRg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"set": null,
"set_list": null,
"set_sensitive": null,
"set_wo": null,
"set_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"skip_crds": "ENC[AES256_GCM,data:2YHs5TQ=,iv:BoTqkwYYmPjKUbli0zcbOCVhkeqxMH65+0uFStKv+yA=,tag:UFQQ+gJFwJjXf3eHUmnp6Q==,type:bool]",
"status": "ENC[AES256_GCM,data:47blXUWZE1A=,iv:qMVUg6TBK4+ZTrEo99b3Bl9JWBcfOLZUPiybhE9J9Bk=,tag:U8zBC2c9FgX4/h+FLVSOag==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:KXIQuX8=,iv:Jcf16DLVSbCSbLwWBQ0+RF1raC3IhaLfFIXSq/exio8=,tag:EtCMRclO09uV/j4dEU4CRQ==,type:bool]",
"timeout": "ENC[AES256_GCM,data:wOHH,iv:NxgcPgEnivu4kgUbEYsBRD8jqdQCKYT1S7IlARZ8Fp0=,tag:iqYltg3B/fFLNjCHUHTgOg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"upgrade_install": "ENC[AES256_GCM,data:5jjmzs8=,iv:gcuZ5Rchmdh2L84Ln5exzlFRBS91gceEMhkDbSqP+gQ=,tag:IeIav1U1wW2zvCFezA0LFg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"values": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"verify": "ENC[AES256_GCM,data:87yUNWQ=,iv:POY9IpKC1tjnhEHXf+5UZC0zkQW3JOONElnhngDJNck=,tag:RsXUqzF0JwXisPgwMT19eg==,type:bool]",
"version": "ENC[AES256_GCM,data:ZJTsGWli,iv:K7DDCc7fG0CF32z6kcn6mpf0m3MdbqADIO3nCNgrZpQ=,tag:IuYbo+sJmyVvPFNdn5qm5Q==,type:str]",
"wait": "ENC[AES256_GCM,data:evSt3w==,iv:kbdxYDG73bdrwOZNt9+/j14SzZ4AXJWCTbx+PI5Djno=,tag:2qhRii0pFP0ZTkNR2i5T7Q==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:PnD8VEU=,iv:hRekaDP22riYZCPvq+9V7euTPitEcdetiJLv9kRilvE=,tag:vG7hXjd1oMxbgeQcLS/MAA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:hOiSp+mDFGRxJ+PHqOVoFScm6gvC+wzdPzmy3t1BXJI=,iv:LcF6KA65aFO4vKDEIWkD5XKHKMm77OqKHlsdAVWs5uw=,tag:GPWhqzlgAo27hQtiYzmsGA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:4L0IphDaFA==,iv:7CMvE7EQ9X1Pzhfe8onLOVUaEaCnPJf1k/Ha7sZHIE8=,tag:LMx2MlNx3H5JZKyd5VAUBQ==,type:str]",
"type": "ENC[AES256_GCM,data:pRHlW9aBHaxETMsz9RaBrJ1u/EY0UsI=,iv:g1yHD7dtYjk4KG16oaZ1uh8mRRI2Car0x46zmgIPYrU=,tag:QhO7GQFRYjoK3kblgWafyQ==,type:str]",
"name": "ENC[AES256_GCM,data:+2lTtDawnloWTOM=,iv:KX2J3tDjTGCUmkRes/w2EWFc0Jh6JPGraxGVGjJ47RM=,tag:k2J3xQrSPebnBIXpO6rrng==,type:str]",
"provider": "ENC[AES256_GCM,data:+AbLCXGwP7xhRyh7Ys7LTdPGRELC6g4SUaZXteSDck5ff6HwbxQ2AZkjFbM3JW+5pXxRJcI0,iv:fUsX/22OwX7fDAtT8SwbPhFwQFvUWLWCPeepmHAkaok=,tag:+Wl6ZdvrU/BpFuwIrX2duA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:dw==,iv:QDCe1JXesNrlKF4hysBtQyFx9Ptx4K30yq0+U+o+aG4=,tag:k6KQVRVod8kchg/WB6KLXQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"aggregation_rule": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:RRegdJF/2lAQUNCskiZXahdM7byN5J3g,iv:wbS6/8pWkZCu+217BS2eQwvGECWrWPl7THc/IhroYsw=,tag:JwvFXsqxc5lIZREc1z3zdA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:vQ==,iv:PmBvAp/Z0XaDVpGmanG6uurtSIaWERDp+wWY3eZ+d1s=,tag:AUxiPu3NDkR47k+tiRaIgQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Jd3MhjCvXMg/G/npdCWEUi0LLHO735df,iv:DJDYT1gl5u4tyQtzq/Ll2txUsanIixQ14eGpNCbrsw0=,tag:dCu9oMV8l2sBku9AZ1J0Kg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:0pHj/F5Nv3Y9,iv:RieQBYsOUn1fvZpfGd8UaVVd0ddCVgnwD6EljAUFgJw=,tag:H8u4M7KD84Yg7vTN4Sgi0w==,type:str]",
"uid": "ENC[AES256_GCM,data:Z/Z9rN8xAbFTVPtSOl4yMmDnp2DxEzddnlhJSh7GMi8HVTnR,iv:C6zNGtfm4dWsF7DX4rStNQKz+Dc4XuAZB0Gv2+tLYak=,tag:3Am1OvxZLdOf8Red//Ezaw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"rule": [
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:3sxTAPbq,iv:vgJb1WKc+lQCvRKg1PjTOq9T4OxjZDtqRjAsE1FhrPI=,tag:hJmF2G1tKEPLrbGEjp118w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:8jiqRtXa,iv:HG5NCpaLZG2V0j3tsIA1uRMYMv+IY6LCdB7TPMSDIac=,tag:sR0zwmPzJ2PhjQCLG6fa9w==,type:str]",
"ENC[AES256_GCM,data:VXpQrpdG,iv:NTm93DwcZl0rWyN5N7nAIG+Od0zGhHzjuPnaqUTTtW8=,tag:u8X1Dz//Fy5MeMcsYy3xxQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:NqMbzMcvRYc3exXcYj8=,iv:FfjOr+9nNDoanfPkVszA5bzsTk2ssSh7mcEz1jP/EW4=,tag:sVgI7cTNfdugx1yLQpit2Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:7d49vaM=,iv:aVtanypT3bxJbp+c3ir0Kq8feuvyvbAuPpV8UQVmSEQ=,tag:4bRubwCCsNd1SQrhKRsM9g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:w3TL,iv:3NJ6dNt4sfY7F45O+DYPowieYWsusnDjn/WOcwlsnqs=,tag:bEWMCb0cPVS/+AJWAkpuQg==,type:str]",
"ENC[AES256_GCM,data:JKsH40c=,iv:KJDFpqWKB8VTmOFJNWhAqSiJmRvOugQ1IFb7EwMpMC4=,tag:on7rJt/v5FlYrO06rLYENw==,type:str]",
"ENC[AES256_GCM,data:Xo9xsA==,iv:Oc9XNmCN7WqPVWNYM8NSwsK/FDt5HW2kW9Vepj9nA3A=,tag:nJy9CNe8VqWCXORoappYMA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:6WMnGAG5+vfyAA==,iv:hC+X9qzuzGNltRud9s3ALPviroM0uVPLGwB1dktj/lw=,tag:K2ZMyzxIjumiRN35mRZysA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:7swv,iv:+DegBwsxWz6Vwe1yojpmZ3F54fQ4r0baVGMQxADLZAE=,tag:XjSctj7p19S7SBsoSXkITA==,type:str]",
"ENC[AES256_GCM,data:KT4ScA==,iv:xdTqWbUNTc5GnfqLogdnkH4rhkZ7rNd4WIZt388RLtY=,tag:u+fio4EjrqAehbuZrIRHvg==,type:str]",
"ENC[AES256_GCM,data:8rFBdOA=,iv:q1adcFf3Pu3Es1prF847EM1P7hoBXU2/HRilBjnvdT8=,tag:kbLgRv/4xOX1FRI2YFkpYg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Kd7Czaskm9A7smDPv18=,iv:F6R9Od6r/hmEL2iI0FozG7tlBcWdNXqe/skyD+d2ogs=,tag:gDVVyYp7D2LdQYTA0pZtvQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:QP2tAw==,iv:B1rRF46po/NZCShecvGYSfOX5JfuoJrAzCANSZjoZ0A=,tag:IN++evsQehJ9riYijVewZQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:GSk5,iv:3buyliJ6D9+mdyCMpk46ZLLIZU/a43ov30yMTbii1x4=,tag:LI08Dg9kdNBGRZ4lvEYLFA==,type:str]",
"ENC[AES256_GCM,data:1nPJRe8=,iv:8R3aSEl3D5wi6xg7xDIHSKJiToSSdXAbqKYV1mUFQfY=,tag:vpPE2jFvpKswgY7kYNIsHg==,type:str]",
"ENC[AES256_GCM,data:m1WMCg==,iv:Y6WCFZrmpPME2YEiCPCoC+4arskQLJZdxSsReop7kRE=,tag:31lObV4uTt74IxOups+Ltg==,type:str]",
"ENC[AES256_GCM,data:GFLKx5tL,iv:v4McYyVVJiwDzw9zwgdgFp6tuz01QapsGpf5kzfJu2M=,tag:z8i/LQ6wPgEfb6Y5JSX0aw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:xNP9SQ9uJ3/IOaBTvg==,iv:QB3bwFTkO5/uLrlmBulpKRk52OcMfgMoih4kxqrw3sk=,tag:ABSzOQmV4tJbiwABLAhn0w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:h7eiJeC1,iv:ndHVRRYnAXrW1XZteYB32qUPIRKot2V8QlldwLu/KBs=,tag:8ZMZEB9IXzL0Z7whvu83dQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ngEICZJ8zV7+8x55dkwAms0=,iv:ATIynlpDqYuKwzWzP2oqg96Z/EfkyyFkFSFKr6ibBtQ=,tag:UOJAP3BIOmFidysPsgFhkw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Lw1T,iv:xph59dDkq0ueNKXVammyHNL8ZmE7BTMOHoyJO/6hFL0=,tag:JmM0ubpQJgNxKet5zAtc5g==,type:str]",
"ENC[AES256_GCM,data:ueCOT8I=,iv:1Ckva/BuQAZ1KynioC66qxqy8hrZIpRdbyO0V1D/mI4=,tag:NYKi2qR1UuNOJmojgnImvQ==,type:str]",
"ENC[AES256_GCM,data:WpyyfA==,iv:3+DRIHAA3mZ4GCRVWmegOVOF7uO04HCIeb1mCCHax+s=,tag:RjLB3CXYhZq8pOJNsIbZHQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:oMt7Ps+gr0YggYhpD022c8U=,iv:Afpc5lOZ5DzwFdH7SheMQX/pEJxkc4Hao79AthWURW4=,tag:tydNCwjvOAlsI+G3yB0Hjg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:JlGekP7q5weWoQHjfJIy,iv:PzVCu1cP3QCkBEjlvQC6W4ANxY+0Xw1VWh8lV/RYN0k=,tag:OPDgYF90fwKMcAZEDPwiLw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:udTQ,iv:MbVDlbig9+SG8SkmHE9h2/9xdRQooi0gAMq25fh9XAE=,tag:Pxz7VQeGzPpe/BmgwMCq9w==,type:str]",
"ENC[AES256_GCM,data:tEKDZg==,iv:1ajSuAGEkqECOvCnW8newcGcwMxKoJoiBrF6hO8eX2s=,tag:sIXZWWhfwxqOotxNkQJW+A==,type:str]",
"ENC[AES256_GCM,data:/h5CsTU=,iv:KjxjbpgIerYPR35ooucxJyhijGJeOpB3ANCyrxe67pM=,tag:NsGzzT7yBuPmKWOja83wWg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ab1ddClx,iv:+JLVAgsLfH1lL4WKK0BfFm8cWJTVNKIaRf8wsTJXcMk=,tag:DQHX/DPA5xljGgKobpgvgw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:RL4lCjxgofgOwlSzu4WBdxe3H+w=,iv:HIXjtNwdsZRGfIWSUtfYb4H7k/bqioIGwfSDfqFOddo=,tag:RzroSXCaj3+eMu4+e5Ea0A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:OnMM,iv:yQ1XKJhQYDkH/+mAugYaiGs9RTh22vS3/wiGeI+OJcU=,tag:5c4CVVsjPb4JXx6LEopvTA==,type:str]",
"ENC[AES256_GCM,data:vILmaw==,iv:AS0TcsDXRIunsMFvDIgZv7NeVhZL+QfrCIG6Dfz1uG8=,tag:93uaw6BnJqfptWnC4XK2hw==,type:str]",
"ENC[AES256_GCM,data:t+5JnnI=,iv:AxeHKqAtsiYb4FdpetX70d1rSZCR6UUjoZoavuzqmT4=,tag:YmCSczieOrdGQJ4F/Vhmhg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:6xfub84YqqI=,iv:ZDj6NYclamxWJZgEfTC8gExjnD1EquuOdCmOd8dcovA=,tag:WlwrMBL2i7wEFTayp8Ps5Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:8Ti6GsDbug==,iv:PlnzJSMUxuWtIZPBBK3txoDMzHuhgJBvaZbdiesHjCA=,tag:qpR1RSnlPnX7V78ekqAS1g==,type:str]",
"type": "ENC[AES256_GCM,data:YHNPnXxbjlcZYKFPnbO5aBleB0MPvYXdP3loM3zYcQ==,iv:Xch0TXn/oPZl57ji+C50MXMbitChEqn27FW31ETsjbc=,tag:81HE6Wo1w4XOAH6DARnrpA==,type:str]",
"name": "ENC[AES256_GCM,data:cPHRomF58ecOPHs=,iv:9BPujXR7+bp399q95e0m8La14tazswn5V1c0lFod2Xc=,tag:4kWfiY5wcn/5mf2PxPvZlw==,type:str]",
"provider": "ENC[AES256_GCM,data:Xy4HNbzH9/8EwnH+rDG1FUQfU79WGqSY6Yst7zhcO1uXzADOagHgUWsBVJ5Lze12K+dhEdch,iv:i7Ujbeg8m9mTPqA/IakrnzBpSjJH8pWre/o/l9SjwG0=,tag:IrHhlQ1am56oagMOFQCtXw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Aw==,iv:qVaV8dvZHYQAiNI7+mtYi0bNx35rt9dXfPMB0LohBlw=,tag:SvkLD3EB1epj89IMNAi2zA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:QG3eu9P7PVdPDk2JsGYzTU/bcFeZXeDTEqdyfbsDe2g=,iv:w26Cz4B4K5sTCAtOLlG5W1iqU2CMQZVkeCU2H/IhQ8M=,tag:Zzz71BcDEkbz6hU+acxS1g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Mw==,iv:qkzuMTTvgwsVROzVTmwq6u9xbzmGPgwp1E4eaDyQ81I=,tag:K1wTeltE25DBQ8v/mO6UNQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:LBhZrphkms4IMvi/tCBRQo4XMpM3T2D0nOuIbWR9Hcw=,iv:u686DLaXca9RMF4jzeesd85TZYp0Ini3RV9QC2nzMFA=,tag:gSZ94D+dwX6EUTHYIr2XaA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:iH2wZSBhmQSS,iv:qL5TSQaJPFyqucfaZCKKlUDHevygzZl0wKMCEF6zcdY=,tag:U0UpJd0FhXixNdsMmwr56A==,type:str]",
"uid": "ENC[AES256_GCM,data:YzEh/8t7RWZPEtrMOs3Ku9bxDQtXSbjz/+UPzq91U8Ac6Tp7,iv:CGyFI7NX2XvNeNbCHPs2sAt/I+JZQR+wNV454SdcHGM=,tag:X/5eSzwrrQ4gHNclDYcnPA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"role_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:ge0WDcIHeZFdsz7Iy+DfuAufRUGhkcbp1w==,iv:QErD6k6ELRNsXI9UW1di6y7uNLWaBv0xoUz/ECsww/U=,tag:GGfjj3/Ck/VYFN5mwn5jhA==,type:str]",
"kind": "ENC[AES256_GCM,data:GqAdA2WAHCpMVJY=,iv:7si2pW0D2+k/8/WDXJrVsJkIVA3CMRZ52HKOR8CsiRs=,tag:LV3hdj5MbpLK1rfVNVKPEA==,type:str]",
"name": "ENC[AES256_GCM,data:zeB0mDzCrtKHuQhAe+BYVpKJKGBkd4C5,iv:i63SQrlshGGZpUz2779ZKmyjS7mShk9hY4spcqWhn+A=,tag:q9kBd+7Vnjt24MYylLcIcA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"subject": [
{
"api_group": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:lqs0nO2KqQSLuWip4xs=,iv:3Cs+JU9z6UNrj9VefsA6YE2TybOh6KMZni2kgj1RSdY=,tag:TdJCXjgcImBQvaeKCxOlvA==,type:str]",
"name": "ENC[AES256_GCM,data:LSfYUVhx1hVF/LExQRM=,iv:9bOsQK6m2lsS+iMR3cOVQPRYeHYgHpOeUPzTSLostFY=,tag:DpDvYjBce199aOLg4Yykbw==,type:str]",
"namespace": "ENC[AES256_GCM,data:u8+OOLm/jucPCU4=,iv:uPvMYMKsO930qmlc3OusJU9RU9D7PdMmDpRtejcpDYk=,tag:Jf5QKTU/1aqSMudNKWrLpw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:kH/jn5K15GU=,iv:pOyCoL1AZTpKZqNfyFZ5sz+A5tqRAG8kl+NdOCWEHYs=,tag:1blqGvrrkPftzajBne/MbA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:NzQ/9Oed6FxLg5bU4/dUJypHB4ZiWWyzBD/f17yeVZg=,iv:hf1OjwMaGb56L4Nrk+10sndNCGJDPJb+TSrLmvcOjI0=,tag:09KqDl91bb4G32n3f7yRzw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:+ypkxcCwTQ==,iv:VREiLFWHjgC0oPhANPNiSvDjSq3C+r6h7alOUoBfUIo=,tag:+2Gd3RYs/MRL9EKODz8ScA==,type:str]",
"type": "ENC[AES256_GCM,data:Wh1hrSZJUn6roff+M4RLgU2E4Ck=,iv:/ez9HBwvwpw7BMf4Cqe8LRk+37+kuZ9+dWzbLbJkBn8=,tag:D3S2eIuy6k3Z/aZwYlSVvg==,type:str]",
"name": "ENC[AES256_GCM,data:D3Y15qfmuA0abV8=,iv:y3SXxSXr4ONH7bMlYwH8LP5snggo7EnGRnyO6bq9hXw=,tag:N3JC+dNhkkY9gVaqm8nKnw==,type:str]",
"provider": "ENC[AES256_GCM,data:qnirNYl0VzoKhZPZxMPocEoA6d5RWjuCQCkIGHgFMxJkaCVGK1OIVhWqREtVrgSuRLaZ2wfr,iv:URUIYbmecO+TfqeRxwgW7Op+86hfGF+uNawc6ON1vAs=,tag:62bqNtQ0EaCHqq/RSQAA/w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:0w==,iv:tqmEoBxMiggYx1nxkh99l4PHZKL9f47qZAGjtGfXvZw=,tag:JCbbSoLXHZfP6jtsfgdC5Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:WtK4+I2Lg9nOWVI=,iv:eMBENDuQ/kILQTxg4dv5Ss/ihTTtI6SxpBGmajDL9tU=,tag:VWMY4WTNpO4ZLCxs+r817g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:6A==,iv:FThZrIAupFfVCNzdcllF/8ZS8/xiCbeSxbpiuVZdnGc=,tag:4iJGu/Qk4N4J9QxXNuru9g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:FBnc,iv:gyqW1LTQiCCdE6xwV8swL5Bbh1a+GjF5AFklhKCaykc=,tag:PxI/6fA7pkw7myZNY5LRrA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:NVgPEEiWTwjm0BE=,iv:BUH6ccp9nyjxqFsujfU/ktKWWluS3lsaKkPvp7DV424=,tag:mGXmGGlroXpFzv9BO4Tebw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:zRo9oUVaprlF,iv:yk8NeByDBNHCwWuVPPVXad7pgmx5C6y+BsxJMmJ/1Rc=,tag:TlmQ+FwzoydxYvFXlPEhOA==,type:str]",
"uid": "ENC[AES256_GCM,data:MMXcbjPgMqks4fqKE+9m1YXniTkdoY4qhgAD9DRJzYcs76gh,iv:FSbFYJmCbBDJwzYMiW4THFB7PUAGoTB8E1t/Uxb4+CA=,tag:BFdnKnVOKg4V8wZBKrkqtA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:LrRuXVg=,iv:jkBcw4s47YoQNY6+/iCvm+Xd0aNMipgKWi01qlGjYjY=,tag:dDKxkdkouhH0qLZWzQgkJA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:BbqdPTXnSMeFAFouzzFzhMa+DkG0bMzTEtxT3q5Uuuwq0Pt9pmBtzlasHyysKnT5fNrkrc713HgLGoq0tz6hBcv40KqelUK2TLFyR97HeKXcMBUGpfUYjA==,iv:xQpe6JPvehIEizdfp8zAMyqVFg5E6Zgp01MyKYG0SIE=,tag:6/OG+2Jrf1dAvcDmiH6rzg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:CJucYe2cJA==,iv:i00UDsCz4zFyuGhcjLu8AxpcLIM71g/QJCHGVx1i8yA=,tag:TslBNGQ3HeYvOJCNjMFMow==,type:str]",
"type": "ENC[AES256_GCM,data:22MRFlRx8odWZCVQa1Mf5dONZ4gbE9EMFas=,iv:kkycOZ+rLbjz7jcBSVjajK8iU2hSdFnFGLqU8luavoc=,tag:AiPkF55FUmJ6uzn4k/15ow==,type:str]",
"name": "ENC[AES256_GCM,data:SRB5d6sOCiT+AGE=,iv:zAPZbL2GF5Eg4iA7HoVZm0996MOLcDukA9ZIfwR/H0Q=,tag:TCpBO8Tsh6usH+kAfXUimQ==,type:str]",
"provider": "ENC[AES256_GCM,data:hI9qG3Mj5nvWkUztzoA5UgsYM7LBxXV/T/LfF603opBND4s88myRlrdvgTwCnFh8/HZC+6Gf,iv:aFa0W2G2lDmVwfdQfdv1anTh7vVQEeVV+fqSHG8kalA=,tag:I0jliZCCSYkDIt6qtx97pA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:LQ==,iv:wrk22UFBrtYP3Jqc9voBLSfaagBjpY8+FeQM8TG8DGc=,tag:n4YkZbz/P8WJrsY9a+tLhg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:o2ULsA==,iv:6WRM3rn8hxpHO3TOxh4Wj591xukCYOYlyegCDvUQsz8=,tag:2gnVkgBiLM2UqLlb1s0ObQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"default_secret_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:m+Hex0AtbfF+i0tUZT4sJPN4b3mUkphbSOA=,iv:yjbmYcS1e/99goozv3E87lV1M9PiqjoipndLDBr+/w8=,tag:tcR89pIgX7i216LtcEazww==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"image_pull_secret": [],
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:3g==,iv:EaXRD1jUEq3jf0q4BlTD9K6JCyXUIwVrrKRo8p5qhLo=,tag:zQGgEvRmSdD1YejmesK1og==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:VYohZojNThxWIFXEtKc=,iv://ZDValIf79QsOmuCte9QTOst3BQNzD+XFgy+zK77kA=,tag:ExEiK0wd4IvyMkdph298Fw==,type:str]",
"namespace": "ENC[AES256_GCM,data:WW+C1UNieB3XOTk=,iv:4dWWVN9ixhePzYPmooIXCGlylD63Oa7TaxNsPJgVUlY=,tag:cH8J1wfoecR5oqknzXLK/w==,type:str]",
"resource_version": "ENC[AES256_GCM,data:xqgZVC9tpQKz,iv:dfEoQt6pFo7biY1vTpDpln8VK1aTxb2yRO9yjkw6iOI=,tag:qz7lSAvC1jMhNCEiGF34pQ==,type:str]",
"uid": "ENC[AES256_GCM,data:FqyAANa2BgJ4s5G3SPIpf7qGB/5VcrC+SaCfAy2lIrmXhD3t,iv:4qZVQ9zsxFON7Vl8f6wqbcWGgAUj3gqhZNgvH2sYAVI=,tag:8kpT1NqfUyr9zjh3GOvduQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"secret": [],
"timeouts": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:dFZLeMttOa4rn0kE5DVcgBOgkwgQSTfPFkSQQO3y8AYYimqL79hrC8OHM1vc9/nqB1IUyyKZ1oEy1cyeV/hmxyP2GqVDNMKWbPnnZfVetKWd57Lz,iv:Au09MB2JmRdPk1Ykyd3xsFa6+7zJxGBinJsm1MpOTVg=,tag:tj4IddnBs+O8iyKg2L1CQw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:lXUKOKDXmBOSYLH5NCHr2xNEDXEdk7uQnS6jpyM6W8Y=,iv:39wIo3JGp5m3nR/VtW7qeOeKCTENwnKWucsEGlOG6L0=,tag:quWSoy/TrNYG35yHDDLjLg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:12Z",
"enc": "vault:v1:ZI++Z/XtHfRVC2DfYb46rYjdQCAEOnok8HODSf03DZ5jrx6uL3LHTaquNS9vj7KFJMrPJ4NQYLj25Lu5"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQlhzVlpIRElWblRRMFJV\nYVFSZ2tEMWpCeDFvaFJWRnZ3OUFGbU1mTDNzCjNVSEQzV3hwRGQycTBQS2Q5Z2E1\nd1F2NGdhdkM3bWNlQy8yZWM2Yzc1dVUKLS0tIDd5eWRJdG9aa3U2RGxnM3c1cFlK\nSVZoTmtSQ0V5VGk2dk5jdkd3MG5KNmsKVNxdfkBBnigwlI2Q4mloM54xVZeFTpKk\nk3YWVYjHNInbqNgJs1Wr0jPImLG7nMKkkpT0BY+lyaWuuX+LOBQvJg==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEcTl0YUhDZUNRMWxuRUw1\nTnJxMld0Y1A4WXcwdE91bGFQQU81a0FmdUR3CjJUWHQ0S1BiaG40bzVFODM3V2JQ\nYkVmL0hTNkdqaFNSRGRjM2VPZ2o2blEKLS0tIEJzTmlycEpBa0d1ak9tWEtydDQv\nVWpTTVh5UWFqTEx1Snk3QUVIQzlodkUKEYDSkzb9TSQQweb2wYrp5//hw52Xvpyk\nC8at99UPj/Ul7RPJsfQ9zQE0LRsu/Uklttu3GNIzqfYwwL0kgSaPxw==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:12Z",
"mac": "ENC[AES256_GCM,data:f+LBiepvOBLgtUpHbv8C3b0KHlonz1O3KqiwFfdS3bS2lbhaXe3V/UV3C6Lj4QZrZMb++D0xaFD5ODxliZkZOAhujV7+oW6OCXMoJdrk4Hvo3O63sW3pZekeRFJqZSOJg/w4O4igKRId+9f3cQcNEYkcZtObXw+sAHpUHQNpiXs=,iv:D4NrohIBHbM2VUHV6xNo+UD+vZ/IIz6sPParygJUr/o=,tag:WejX68/LB5BBYR2QFJ54KQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink