viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/rbac/terraform.tfstate.enc

726 lines
134 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:LA==,iv:ZnsVvnxU3RrrGH1aeJUFK9YcOMchg8d4cydsLJSV9G8=,tag:A1UISW4DPP6lYFiH6aEapg==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:YCnSBPI=,iv:KhcYJ5PX/8Ojj3QyDXjEtKkbPFrXs3WdmpVLRKRIy9c=,tag:fYqtHn/PdRxPWS8A0aEROw==,type:str]",
"serial": "ENC[AES256_GCM,data:XA==,iv:hs4EMNWM8qkdDdmKswG7bKXALxKPsIjE42A5H+kIzE0=,tag:pHi8xJoXStyj+A6ORepj5w==,type:float]",
"lineage": "ENC[AES256_GCM,data:kRv81xmC7gvWuIqP3qxKxvcUpXFkIfXDuMRtK1seyfFNORZd,iv:vqQ7kWT2vlL49RYUZCcNjg1ugg04X7qt+8CSTQ4FC8U=,tag:QOOP9KGOYgMsqQXVN35rhg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:7cSAgQ==,iv:banp1xuJ0KS7endpWhhGiAvzD6jL1pk+hVgmUKLtgZQ=,tag:ZzBK6ZCJmBYxxYwQuMyYqA==,type:str]",
"type": "ENC[AES256_GCM,data:5Tc1sAqDK/Upx8k+5NfQaSfa,iv:KGkuJi+SK1ceOH7zrDtwdPLvI9exX5PMbBTb9hwSFqQ=,tag:SMPrIlfdaeAI4TkvyqygIw==,type:str]",
"name": "ENC[AES256_GCM,data:PkyOWthfAA==,iv:vAST9RFe6xf4d7JVSrmf9Gwzuni4dK33tzfhxM0M7SA=,tag:cHdGP7UXzbcZ8M+V6em0pQ==,type:str]",
"provider": "ENC[AES256_GCM,data:ey4ezovUZDpLlJ5IZ0zZ4FrY41aPmJe0uSvIcvlKrHcxRF8piXb1MM7LJU0viN3AXA==,iv:Nq+OioDZ0EgFFRuq9VrP3ppZHld9RvzkwGkaspvgkVM=,tag:e3hHMLb0UNTzwbU9iFxSdA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:gw==,iv:trSiwTDkpA14lEwElE9pzOmNkDvoUes2ay3uf01+ksI=,tag:yaA/Bc5PIrg+L1cWADRW+g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"created_time": "ENC[AES256_GCM,data:0rTY8mPtA4IXF9xArWKnwvi1OuruKc5+6ROjUtuM,iv:FC7oEdElKGOe5QJS48hygYv/KLFqstTD1QMOORVErVk=,tag:LvlcFRLWgp8v9NlUAjlNVg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"custom_metadata": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"alertmanager_account_password": "ENC[AES256_GCM,data:7/j/scXworQR98VYU+9Ao9bRVKE=,iv:Bd6sjY0FZ6qc1mbnXtGeVq79/8OX7fg5uRHX04qdaDU=,tag:BWGO+xO8w60gU5JhLRdJLQ==,type:str]",
"alertmanager_slack_api_url": "ENC[AES256_GCM,data:camR4B9hQClMHNNzSt2DbJXhRS9AmbCa7PT0P2dTFVS7dxZ/2u+bdKTntkXKb7usfLpTuQK9RgPBnALHA/B3CqdIhvzsAy44ohGtkLYHHtzN,iv:4bF4SUMukpXAqfRFhzFEpYNj7B2wCGGmNbt/rMRsh2Q=,tag:QwvvgdmV0tzTUMs22J5sQA==,type:str]",
"auth_fallback_htpasswd": "ENC[AES256_GCM,data:dqLA0sdhNOrTZ/+G9lidlPtH1iqJIoEsJ8bTCDEOxALndM+66aEZZVCH36ZESvaB7qTrHyXxlKvzHpPYWEYYuAiL,iv:67Bi+KmoUcKhiOHnaQZZiuKdpymph7IpSC4kZR9U+uc=,tag:nn2rM1qEQXp4e5nTf/v5IQ==,type:str]",
"authentik_postgres_password": "ENC[AES256_GCM,data:o6jtq8kaNhFc4Ow9TNxIjQ==,iv:Z0svY3I9mXUxlAYtFm0F6cd+6D7h4ocDTGbv9jW/Ars=,tag:ZPs3EX1pcQjNbu+eJbMyzA==,type:str]",
"authentik_secret_key": "ENC[AES256_GCM,data:46ctLQqjwzWxToYbTBRgLIkxPw7JSEx2CIchoLl8xm2zWB2+L9onEeGSQ8m27mmtmivE,iv:Uwi/QUwTFBOjUFxz+lzlqWSkBCSRxCfuAG4hXMzowjU=,tag:v+zji1o5+0U88pu7ILDBiQ==,type:str]",
"cloudflare_api_key": "ENC[AES256_GCM,data:wHh+F94mZanMUPOxOw/AXRTBRXiUliW9T+aD9jFp6eTxE7u4Ig==,iv:BjgPKgRLyduXo+9UDUSi+dk74t/E4zjiYbf5fB0t42o=,tag:LcwOKuw9VtJHqn9GZhO2ZQ==,type:str]",
"cloudflare_tunnel_token": "ENC[AES256_GCM,data:ToLowk4qBX5FA6weORR2oxGWLypLJBnQ4is06WHfJFw0uj5rVgGy4/nvINcJsXQT4Z/u2/MWDi89FaPmsfuIzL0W3FrytDroBA5ApphGmwXqRhIbTxm0V8ZRdxNurL0GT07aKANjosDTMhAcNTHY0lYq3d8JovPtu5AnTHwUGwdQb+dq0Iz/rLpwhjXJpwHSt6L7ZGhmVYu4VEfGkV37G1rdSB+oN6Kj5qiBDS7oRSmyTT5BAocN2w==,iv:SUn8nj1VVYAJcTadfF0NKilCopLVB/x6cUmNw+6ZJVg=,tag:9c+BL8+Fz7IpAqk3EWE/3w==,type:str]",
"crowdsec_dash_api_key": "ENC[AES256_GCM,data:NPigqYDiZ+ERYnbrozvMeFmzzgbF69AAeGmzS8crs5dyJqIIahizgp9IGw==,iv:osYf4MTTOJ40D7/X7bSlmojq40QTLqlOHxrFKXVlQ2c=,tag:2FU7U30nacuXOn11DZxZfg==,type:str]",
"crowdsec_dash_machine_id": "ENC[AES256_GCM,data:8n2WzGNy/p7Xe3JgOf7nkFCT85a7HzFoe3dAgpY=,iv:6rPOv0zCqeytuWyWOPY5V5oM/KifdHKGOhErSV3jVgY=,tag:lrgdf/rwoBS5KBmm7/McAA==,type:str]",
"crowdsec_dash_machine_password": "ENC[AES256_GCM,data:lQBebzFIQTPyBLeuN+a0L7XFbjNIlcC8eS7tfBI5KCq7EbXytyje9SlLTziaxWV3f0AYgi9OrxiWiak0/1RTHw==,iv:MbPiPHsjvLkpCxcLKS3nmbM9sEFjz4Coo03k2lZADYs=,tag:pZZ/JgR4pDHZwyuojg5hjQ==,type:str]",
"crowdsec_db_password": "ENC[AES256_GCM,data:OWlKL88X9jbAMOh83eY=,iv:fOXgO44Uey0V84wjtIfGxXw5fObZGdBsMv/lxT3MSow=,tag:336CdZODSUN1AVEhWCANrA==,type:str]",
"crowdsec_enroll_key": "ENC[AES256_GCM,data:DxgZzFRcXTuZ7pZA14FIyD7p5rx95LZfLw==,iv:Yy5aq7YVsBszgrvVa3YDypRYZwIhi+aIRITniQoApHA=,tag:GGsVf/T+J6qdb3UxTqwmmQ==,type:str]",
"dbaas_pgadmin_password": "ENC[AES256_GCM,data:G83dFGKZ+bw+MKaiQbphP1O91JG/al3ZRgk3DLBlQk0=,iv:6zejYdSZkOsHfEmNJZoTAOjpuG6zDEuKL8YbdYqDPMA=,tag:DMSH8hV4zd+N7GQmpu89bQ==,type:str]",
"dbaas_postgresql_root_password": "ENC[AES256_GCM,data:pzD2cuxFezWikmg7l4bsWgDgRRfl+/cNH0w=,iv:FDlEU3qwWcSMx61P5uJui7qCK6seGvMkrprwYiM/CzM=,tag:QUt+477N7eevu8tUGzypeA==,type:str]",
"dbaas_root_password": "ENC[AES256_GCM,data:c1KttLaWLTuChYJ2z7n/SQMYDNLTs6qa8d8hXw==,iv:nITB5I0l6gXkW9oOLFjfgfdcT5KVk/QpY5npzzpVDa8=,tag:swDsOXQOWOsfsbIrQ+X41Q==,type:str]",
"grafana_admin_password": "ENC[AES256_GCM,data:a7Pmkm/BYCEwnMB96LHRf5g6/lM=,iv:yWEIuFn+mC1etggsvpWKOX86e6fWQHt5p9pITxYAKTs=,tag:nig/raBqxPRAPV7NZvFS+g==,type:str]",
"grafana_db_password": "ENC[AES256_GCM,data:tKKb/jSr951V/B1/ZgTeinZShUSd,iv:FC7SaGOdbxA4NnzKPLYPRoBwXnkzKegk+q6qjezUATE=,tag:L/Vh4/PPasNBaqIQlwDe0g==,type:str]",
"haos_api_token": "ENC[AES256_GCM,data:wpQGghhGFWqS1REx/A7my28I44kFQl7UgoQ+I3xU9ZA2sP8SMMq2fM0PyPUCsVSlY0FZOwOEclQC53zmAzNVZSWypdliPG0Tw7GUzcSxEZsZSthR4yFgSMtJsa3syyYhrZCfdvWUCiEjfVJPOFGZ8jQxKgU8KzFcL2f/zBZtvLKD92vzM83eCCn4MGZU0su4iVgr3Bs5vdvvJIBTeuWX/SeFhGVqtQu/hzL1HOCuFy2LvreJi0J2,iv:cM0zBqV9cPv2vQFAVK1Qy13YzKnQk+GbyvMyT4uHB1w=,tag:+lgH4crsxek2cV4t6uw57Q==,type:str]",
"headscale_acl": "ENC[AES256_GCM,data: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
"headscale_config": "ENC[AES256_GCM,data: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
"homepage_credentials": "ENC[AES256_GCM,data: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,iv:CshcmEsYnhDfwpzr/PMUfAXDZyb3AVmOjWnLslGabNI=,tag:sR+5Lx3KjoA8D+sYPTShnA==,type:str]",
"ingress_crowdsec_api_key": "ENC[AES256_GCM,data:w7s4/jNSTlRvTENvLeClqBnCXJ5PKkB3VRtcDOEoK1ak2qgZK1SC4Qgv2A==,iv:xIsOLJaZLN/HwcXuRLTGfsdfR31MUgWULNUssLAY9X0=,tag:zhx1f1pbU020PsHz62Tr9g==,type:str]",
"k8s_users": "ENC[AES256_GCM,data:VobJj2Mnf3IrPvw2lGcq5PoK7rYHi5QDuen59yuDKWjTyfJfPC48WUB12xeniQdsAF+JB4d2InKEorZCHk+g3iqyDsjrPO21Lfk5LYVOzcm2HPYt5e+ipXXwKZmC9oiZKC1Y+3L2R6oeq0VvLjkU3u9sem0VxaTmlgwEDjM/Hi0YOmR13POTEY/5c1etYxEIVKwv5BbYQkCOftEkmb7bZxJG1tcbo9E71qGxKNY=,iv:RYfiX0Nos7LYKEa9E1VYjGPQm8QqMx6QZEF+2pnv3Wo=,tag:+97973ArEQ8eE3dB7iRX/A==,type:str]",
"mailserver_accounts": "ENC[AES256_GCM,data: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,iv:/yAqowrN2fG9Y7Q137fGYopCpdTdZSKX13GHmve+kTM=,tag:3c406AtTLnlnEyWzvdzrhg==,type:str]",
"mailserver_aliases": "ENC[AES256_GCM,data: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,iv:j8gkn4yP8KrhnROi8apNlVg1atz5TcJQCb/vj9BUqJc=,tag:4jbhW7fSkHUwIwppIy96hA==,type:str]",
"mailserver_opendkim_key": "ENC[AES256_GCM,data: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,iv:/71MBY1vZQNHKDc1bNEZeJl2xqDv02aVLwfkdBbzWJ8=,tag:fPaUQWbOOVsvfHzqXOX0Pg==,type:str]",
"mailserver_roundcubemail_db_password": "ENC[AES256_GCM,data:yP5ECrwhMmqyE3KegGE=,iv:5ZV4xIk88MGBVLChsDRG3zBsqNmE9KYCUrY8UZhT/c4=,tag:ofzlqysPszM/dsW7xRmipw==,type:str]",
"mailserver_sasl_passwd": "ENC[AES256_GCM,data:7kJja+dFlT/63DNs1EpjdsidDZnm+LUOllP8Sp3xpu1oPwNFtPjixVtTZUwQTBzjE4rlRZ+6gZj8Zu/u4I8IWD21HjBA8raWPgQ2791cBRKEDiCoRSNN4RdNetNsxkI+mQuU,iv:227Hx/pRvF7li5HGvWze/ICG18K3AaLay8OrjH4Gjxk=,tag:/dA16cVC+rfTdVGk+HpqpQ==,type:str]",
"monitoring_idrac_password": "ENC[AES256_GCM,data:TwgyVQWG,iv:3mPzkBFUkD6BPptSkcNnBq08Gj08IK3CvhlVFin6L0E=,tag:F5jq9NOlt5d6h4Dw+6Gyww==,type:str]",
"pve_password": "ENC[AES256_GCM,data:5SdD+WU5620w8ZIXRA+yeiikYf96+8Mt55FoMg==,iv:SI1aNp7I/fewLJHssrGUCCRt0/pd7KTPZmGRQVN69j4=,tag:4JiNShRCyZDBVWLVom6gYQ==,type:str]",
"technitium_db_password": "ENC[AES256_GCM,data:n2cZO3LSVbC4sNJqHlQ=,iv:AYD/eaWMh/GOwFh0l37ao4Na2ku88fBlkaKe6LxtqVo=,tag:KKJvC/eREab9SdsMFIrxxg==,type:str]",
"technitium_password": "ENC[AES256_GCM,data:6NgtouQxRWoT35cLDUpAGaGLvBVgMh8=,iv:fmZz6xRAADvStp/tuni93TyH4qN9pPdrSMhgmtz2ukg=,tag:ZqWhXbyxWrY44WfZDKofWg==,type:str]",
"technitium_username": "ENC[AES256_GCM,data:vcBe3po=,iv:QSu/1yYjon0QcdHOpQKl3ZZ3j+GFX6PAp29mzGN6DoA=,tag:z5ySOvfHoGXo8mxSdW6UPA==,type:str]",
"tiny_tuya_service_secret": "ENC[AES256_GCM,data:T42hZ5p+mkSzBnhpVS3UPbmNOcS2CQ==,iv:qIm1GseV8L3oVxJovYEyfH1JBhTCXPwL+R1goWcbZUc=,tag:N55I6l4Kaua/EgvMEHS8EA==,type:str]",
"truenas_api_key": "ENC[AES256_GCM,data:nbxVz7EJhhqIklAdstbQAgfR/Cesk4ZFSWeSnHaJA4pExRgrj+REZfNwXyL3p5JIuCU17ennku5GRLfflj97QoUr,iv:I8KvAm27mOfbLC4x5/UPkfxDCfjpobAGZ6exjFTzJPM=,tag:zMy4xtcu3rylar6Z5O+HrA==,type:str]",
"truenas_ssh_private_key": "ENC[AES256_GCM,data:a8VpbJwn8OPmk8AjybF3MgZpkBTQeh2+NhsdxmCyjFD3a/HQcteN4UI6x0xK/8gERuCHA1Pd8Qjjohitt3mHxoUzAPW5I606b7dBXfyda5VJtuy486N9FBsae4GGGl2pyMDzbeFE2HRsAuJJCWcfOD201C8dDkeoy/M+R+tCtsrSCUrTkyWMusjJL+hPLzkstTlETppF+g29YbxKFYq4quGkZKEQ19cHZeJU+fqT+zcb/bDyVjGTnsr2w65wUa8pbOo9+cMpT/xBOIfCvgdbDZf8X7eGBHAhR4IeBhEgJpLR2O+VHjCuR8P2wOaP5JlJAcCYiinfzpQJcQ//I1/g8P6NGTTvAMbzbbSTV3EPIC5oWPM5kb4s3KUEEjV7iCY1yoc0TIRNAnZl/Cfgzc0bB0gC2Dbjt+ipeI04MAAhKoJYQcFWLJcaVejKpdCINnK14c6IxGZElrOsIWVJnVBDwgK412wCgebq0RD5lK/6wrL6wCSntuvYUSTznw2Y7Cu5ThfFPTl71VZJYXfD8MUa83Jv8SiuJivLTecb,iv:WuDaTCgzW4XGtul/xHYE3YkpcNmehCTJEBVLH3SCk0A=,tag:a9mro64SJ1vzn3e4MuUIwA==,type:str]",
"vaultwarden_smtp_password": "ENC[AES256_GCM,data:iRK5IMdcEWYaSZ532UgndW+G0cg=,iv:n+LefNU+ypJL2cU/pbpdRIwKCf8k3PMTdub+dNZRNSg=,tag:9DsEeoekhIiS2v7FqwKcXw==,type:str]",
"webhook_handler_git_token": "ENC[AES256_GCM,data:RoalLzsISyZ+rUO2xNmVUtwhvslrv/t0feePYRtGYe5rOiKhj9wnKg==,iv:DTiFULra/SjnfCsHzZbtNXPMJY7xNRMeQKjuz7DoUjs=,tag:XH1xqyHkuyFRl/luZWV5hg==,type:str]",
"webhook_handler_git_user": "ENC[AES256_GCM,data:VPPgpyVjxD28UvgR,iv:Kt5l6QujMNfwMt2mGm2PSNkrXGSl2R224mahsJpiK7s=,tag:GoSkL8i1TeHya1kyeYhbow==,type:str]",
"wireguard_firewall_sh": "ENC[AES256_GCM,data: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,iv:wAl+EUB9om8ioel+VcjOQm1eq8x19At6ddGK50FcgwM=,tag:CjTaQzdjOMBC/DvZcMRgDw==,type:str]",
"wireguard_wg_0_conf": "ENC[AES256_GCM,data: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,iv:RBc5XfQP85vjSCSPQ8STz2gSW8C8h485++J+2fLR/mM=,tag:9AzubdLlTbjmEHSoW+VVeQ==,type:str]",
"wireguard_wg_0_key": "ENC[AES256_GCM,data:3QKjbKAUDHiZInxb81XXa33uN5cNAZd0qLp6yrU8SdZfbRpw0aWFs9LCuxk=,iv:shj2UrgoKbYsIS5fIFD/WucRyh8ZJhq8lFfq/AgT6IA=,tag:REsrfIpe43asVnnFcYqJzw==,type:str]",
"xray_reality_clients": "ENC[AES256_GCM,data:hN9BonOtUS85qGV3Xgp1CYmLo5Uz6/iTGhD01wLAHFffjsY/RLFeOiGyQZ29ANI=,iv:RnRN0pC13L5IZ178Z/CEiZvSwTZX+aRG5Cp8JXxO/fI=,tag:QfKxTweSXh1q7/Jw/w0Y9A==,type:str]",
"xray_reality_private_key": "ENC[AES256_GCM,data:IoeHEGWA5Nr4PQJRyJv9MrPF+CEEmKZp2lGAlbSAQC1zhtfz6LETq/UBIw==,iv:73EVRKgDYAnjZkF13nX/WSKoS2JiwqCDLHsbZddNhSY=,tag:7nuLgsfjQb4jWGVcdTvXkw==,type:str]",
"xray_reality_short_ids": "ENC[AES256_GCM,data:84TugFsiWclrRi0wgAq3UDIuJVqJV/rz3UkAiQGexXxC+8BixR2DV43iG6ZQ/vRdBcsO4lq+RCjaZmbvRkjH9rE=,iv:4vt7MmtNEdkZS2DuOKtmp6I+XGsyEqzRfmVTIaSjWuE=,tag:+HD/LnwjGe8ZBKW8J2LoTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"data_json": "ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"deletion_time": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"destroyed": "ENC[AES256_GCM,data:VNE1Lb4=,iv:XV4hqCKc5awMCyQi0+vbWQSytkOhmcmzaOi4Ji+wdOY=,tag:tcwq5dPbwHN/w+3b2TmBrA==,type:bool]",
"id": "ENC[AES256_GCM,data:zH6cDrvNzcsaiQ8K2D77+8yWezQ=,iv:3V9Ra6cHyfClQ4W0FbHOV4thLq02lVDYIzEm2h33Xhk=,tag:VUW6uDvuE4zkiuW1WexzAw==,type:str]",
"mount": "ENC[AES256_GCM,data:KYBaCGO/,iv:aVSoPsl4ipX4WtECIjChu9LjSe7iIn4lX4c48tIKgWU=,tag:flI1bYqsKyTD3IVXgbC7aw==,type:str]",
"name": "ENC[AES256_GCM,data:yoRv4/dUlCM=,iv:e01a/LRGH1GR1GT+SPZVFHxxWMOlfGrzUjuLv0DY7Lw=,tag:agcwHNJji8Q5LtWL4lt4mA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"namespace": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:EcvU80QFyFcU2GQIyKZ+0d1Q5Os=,iv:CW3X3TTk/98PvNm3SJxZZpnxMun+BUp19CMUl5xvtqE=,tag:eElh5dVUbnAOYuuf6Flm0w==,type:str]",
"version": "ENC[AES256_GCM,data:AA==,iv:pftlOCtdQpscNNBH1X84X129yEWyPWoMuRoNaIEfbJo=,tag:9LjCmx4JX1Z6xSitTaX7bw==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:O4WxgFXSTt+/eWE=,iv:OmEV0/wj11XVZenTSvUxhFNBtF77S7gWV/GKaFCAwHg=,tag:CVi2sB31znFmJZLSn1VdVA==,type:str]",
"mode": "ENC[AES256_GCM,data:KNRhn0ZpYQ==,iv:mDNCHfBFLvvLHUFYCRuU4yeXrZ2yjtatTdaBE/0abWA=,tag:P2OeGUsR+uF+jrbWtb2Opg==,type:str]",
"type": "ENC[AES256_GCM,data:giYfhtV9YlBMJ6+UL32XVcEyfSx+Nuk=,iv:SNK2YO1cgdVzAecQMxONn/5UmRWw+hGAkgZGI0HKcvA=,tag:NdSEOuFS5PvBpwCePbwMqA==,type:str]",
"name": "ENC[AES256_GCM,data:bUyTVIm+4GoXP7DAR43/HXBwL4JArYFH,iv:V/TekB/7G1aruy1V1/IfBNAQXTH/FTuI4W/eH5Zs4h0=,tag:oJZ6BZT7/W/7oawPXgnULA==,type:str]",
"provider": "ENC[AES256_GCM,data:DPlS431loz6ciip50VTHsChByqNWvjcYK3KA7JqB7QXKU5YdlPmHjpw8z0v0riNswpjy2oB4,iv:yMqF/YO0WHYV87dzaSs4WQRU6bNJGbbnLnEDfjjFUjg=,tag:LhmK80KKkOtVZq77ocWRbA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:pQ==,iv:WD65dpxoqR06OCH8A5xIxaMP9+mt5I2nN/fc99hYSZw=,tag:rI0Ihw6CyeE6pFEVcs/5UA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"aggregation_rule": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:KCD70d/0tq8e4YOUe3/8xemgusT42txHS4XNkD0=,iv:5d1K3o2WQGnbgYyZ0Xswji6TCBZO3kwziaNCkFaTnS4=,tag:N0a/eBWy68YSgCEbu2WT3A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:AQ==,iv:b6io2qvjj7zSDxRD1ceviPdXua2zhynVt+8eG0/jkO0=,tag:ouD1YL/KyGf+0TvX/p2R/Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:grG22CFF2aG0wfewW88lXooG7L35XxxC+fapU0A=,iv:C7FtL+KsNlNT9zpSdXxZVzH6DMcfdPQRe7Yx5rmJ3bc=,tag:CsMFggxu6O8DkF48h+EBPQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:EZxnavFnqqtl,iv:aggakbyMa8az5s1ipV8Qxvm4lCaqNGRzAGE1eAtyvB0=,tag:00d8ANHhHakunChkd2DsjA==,type:str]",
"uid": "ENC[AES256_GCM,data:Wrn6Hd4QL4JGeDGpEz+UxwD3qkygckUrTxPq6GGIn2TMfOyg,iv:fS29geIwQ80L8jipgKgEbbHJ/QKxWZXhaOR3hw29lGQ=,tag:dCTzo57BDa/VERKqVQxB/Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"rule": [
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ZswTNxwaQFUhag==,iv:Ifv5iJXb06g3OXQZr24VCfXXh+kDvEG4tv0vPt9+dk8=,tag:UhjO8yii7T/b1zYv8QgowQ==,type:str]",
"ENC[AES256_GCM,data:InFtjro=,iv:hJfJiHgIq1xvsBSTzfF4KQRDsMvhalBe1n1e1TyVBK4=,tag:nXX9tIfF5hbkHLJ4Y+PSsw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:f1xI,iv:6Q5yIQsxU1WDsOTRPdmrWb3/a9DZud6PuM4VTa5C+uw=,tag:iIXAZNTfb9F+4i1tsqEgrw==,type:str]",
"ENC[AES256_GCM,data:OJBNfA==,iv:85oTh7Sh7KIHSQgojnLGlQ97+2g8iBlwFYW1HQ+a+Qs=,tag:tFkXUz3GxI6i3iWBi7BUcQ==,type:str]",
"ENC[AES256_GCM,data:J+m3R/Y=,iv:shm0SFXCrV0UVkPBtlEKQTtEH/Fn3SrTBqw4CFetAg8=,tag:N8170twWxp614m/Gef1BXg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:O+IvYQ==,iv:ed7UW8igq4kKsVEL36yhoTOmO0l0dxpO/UpLFFr+Xd8=,tag:PJdXIBEoUNiAT+tz/QzKGA==,type:str]",
"ENC[AES256_GCM,data:EUKJVB16Pro=,iv:sQTnXL7dMso8p+2gOQQO1zszN525pb6alhvtzX6uqIg=,tag:RrhwzKfEz2zpY/1mo37a4g==,type:str]",
"ENC[AES256_GCM,data:OGSUAYjAInBzSA==,iv:tFraF3V37SQy4Lz1VijISzCFdrvfDdo0lCluC6c4Xj8=,tag:bmm0A8ElIuzMAex4ExRPKg==,type:str]",
"ENC[AES256_GCM,data:8LbtEOAs,iv:V/xSEHjZOQbM1vh2EfwHT7+oPeLbu7eXUuyYfDFQwh8=,tag:WIqTvJlm/gYy1fWJw67vwA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Ykta,iv:IM5v420R3bhmDJVg3LRe9dPGPjHfhsNy11R4w23fSP0=,tag:g4dNyqeYrPscUa7TZE0s1Q==,type:str]",
"ENC[AES256_GCM,data:wXJmAQ==,iv:qVwNWk7wEy3iJeCXKQFQkmNzaq/jAjz9UMyJ/Qz2QE0=,tag:PzM7EaIDrrmX/L/kTFTkQA==,type:str]",
"ENC[AES256_GCM,data:jALY3H4=,iv:yVX4PX3yMFzV1/MrqCo3RhnAHcoDgacLG192FeyHGJk=,tag:6XDIkrjw+urKA7JG5O33OQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:OicLDQ==,iv:wokxnA2Iq2sREsHxdNMLt18Z+EFn194ohQK490TPLOI=,tag:4kBn88oqviBD93PY+DhPsQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:0MH3OpIvVEQWE8g=,iv:iDIPFm7DyS1XlPnSsfevPP+hfXot7E4TPFanZcuE5hg=,tag:/YKuMz2KKhBYAFjfPYCoGw==,type:str]",
"ENC[AES256_GCM,data:bDgE/jLBAfxQ9S7i,iv:UsCJ/ij2yNDDaXEux32m9pSbXmGO8UwqOR4T37kTE5U=,tag:EBOuTn43YN5mU2Jw5L4jvg==,type:str]",
"ENC[AES256_GCM,data:tUqT4POZOoQUDQ==,iv:BJwfFaxDEy1zsH6T4PKMHE7txg5JhcHjv7NgjffHDU4=,tag:JR0iThRVe8ViMiXrrs4INQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:/frq,iv:gVLVfTqzjrvM/8N3wkkNMOlqGMDpS2dAbp2upAdy5QI=,tag:eVeG0YhM1DbBMFx5DkRgvA==,type:str]",
"ENC[AES256_GCM,data:l88QyQ==,iv:Ug8StaKNh1iV54xzogaYDW+BCplIjT/ccqu+g6x6mBc=,tag:zA7fmZqIFxcA+XyDyJnUHw==,type:str]",
"ENC[AES256_GCM,data:aiXEJBQ=,iv:xIhWZvXU/mHle0V6n2K9we5+lel3LweVBXj3HPxg4jQ=,tag:MeoYuEsmMGjmfLyh/Lu2EA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:UfbIo3wdHDc=,iv:3P6tz9mNoI1UQsxD21k09uOLdoREZFgxKoBOSEqcEAg=,tag:6O2L+ePQLqdXv/VHDuPccg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:9Pa2u0FimdF5bgg=,iv:/eGuMGQ7s8MbVKnB+itLDW3aeLgm4Lu0HEb86yktVZY=,tag:oH1FiepDUEw5Pv7TyLzfLQ==,type:str]",
"mode": "ENC[AES256_GCM,data:TVKB2EC37A==,iv:tuXO4aPw7CmEM6gHqWoP6lFirK7iK6N184CsHIWdaOQ=,tag:qKzyD5FRDqeSgwMnf42rGQ==,type:str]",
"type": "ENC[AES256_GCM,data:Dx7r/vcQk3Orw32guYAOViNhOOXLRzo=,iv:pPgIoLKRXbiwbLLif9qpb14NObK/3Yv57Uy+PzfkKDA=,tag:oylk/y0e+7jY8YcLY3q9KQ==,type:str]",
"name": "ENC[AES256_GCM,data:yS9YzwRq0Yu1mQ==,iv:o7cGdH7LHgUSss5T3nc4/Rgt9+40vjS5dQ2i7vRPL0g=,tag:gRQ7WWySGebzlkTsEj+XUg==,type:str]",
"provider": "ENC[AES256_GCM,data:XIay5O/FRiai2ENkrvMxLMXgaykkLQnfWq7fx26b/dudg+Pc/Jnmzbd6P5YHHVsgmhKR0K70,iv:TrYVePwCLovNg4Sm30TTxQvD19HeY8yh3ZFhowoqv30=,tag:qLY0Nwtu0k4kgvg2dLV9jw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Gw==,iv:hNHyyWswC0Ss60RW1qQAY76kD6yfr/UEfaxnIQmSDUk=,tag:u+8GBRnAJnaCdaKL4Pt0XA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"aggregation_rule": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:UtOs6p8zXltqZvMUWltq,iv:q19nM+xy5bYc4E0nGaNj6DjDnf6MFuHGn9BfJgrbvCc=,tag:FB8cL4cww945YxcZszu8KA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:5w==,iv:h+iVRgDzfxWIH9OU394ZCQjH9JoMUHwR6vcXhIJa64s=,tag:J4z8V/hLq0etkYWacsV2qw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:JLElRXhvxrWsEDseqREI,iv:Zhfj5AZ77YWzz2KVuKxwDN0EiKA25uvBwfIOzQeRzv0=,tag:oxwEGJtVrxhu5oSAIaX+fg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:dFutsEYccFj6,iv:KuUeTvGaA+1Sdzo4UXdsUMZM5aKqXn1S9lyTkKMQbKk=,tag:FDfreRd9Q92XJFtdv4QpfQ==,type:str]",
"uid": "ENC[AES256_GCM,data:vjSxH/DxkGaHv4onS1x4b5Gk66seqr4q82dqxE5opwVkedio,iv:j4PTomM7Enuo81xj5BEgMFnml7qNW9QzYO8pk54PxEM=,tag:uhcMss6m6FtlfeJxKmM9Xw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"rule": [
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:CuFmkg==,iv:An0MUhY0TLy+WPbyWctKe5RWyJ0NyrCpRnZuwRmhXv8=,tag:eCCfj0OBOV/SFFR7a5jFLQ==,type:str]",
"ENC[AES256_GCM,data:PzvM2uDp7Rk=,iv:6QSJxHcqpWadjP4wnSWdqZNVG/5NGRiKgcTlYSC66ps=,tag:GzCMGByLqcboHY5o8K149Q==,type:str]",
"ENC[AES256_GCM,data:Ohpe1J3fVGWi,iv:B6i9v1SYShbLuS7NKTpH4GddQag34IFwoUqPGWJ5mCQ=,tag:RctjKLvQ6lcu+s1k9Di/Kg==,type:str]",
"ENC[AES256_GCM,data:Ec/dfQt1kVY=,iv:3PxJHsxahBsWhHJ03gZz28CgSCBmWSV6VeRX+jeoxaM=,tag:mKmTpM3DhOe1dcRZ4wROig==,type:str]",
"ENC[AES256_GCM,data:umAB9PPKg/86,iv:4J8lW0w7LGvNsoKOqpDBYwTBcI5MDI4QbqCzCHgChZ8=,tag:AV4bwFzZImQAiinmczg0rw==,type:str]",
"ENC[AES256_GCM,data:ftiHEjz6wmOvZQ==,iv:cwLWZowlNGfLbglHrfB5y9/I+NUHfq15fnPLu0ZgxSA=,tag:rI/k1l4AyFOwJGabQXvTCA==,type:str]",
"ENC[AES256_GCM,data:dDIEWntGaQ==,iv:ow3cLuo8PHIy77L71U4+WceJCKTORle/xQRt/R2CwAg=,tag:trPEXiPHHf78eSInUhS3ow==,type:str]",
"ENC[AES256_GCM,data:OWv3A5U8Xgd2Vgmdmu1bR2pj0UOoUQ==,iv:Be8YyYTRHYI1GKS8e6KK0VGRSqajaBGVy+w0GQTj39s=,tag:TRoDAp8LZ1qNCkaj6+eORA==,type:str]",
"ENC[AES256_GCM,data:4LkSJJvc,iv:ngFN5auhD5rYU1Znn+JVq73KKeZ4RdPWcUj9Wky1t+s=,tag:Pr5/ozVPgCiG/+Kf1XvGaw==,type:str]",
"ENC[AES256_GCM,data:LgQ3HPkkqA6jyg==,iv:Jmjgq7g/eghHOVaNr96A5FtQG2JTvJ9dBgwRSvLdajM=,tag:GR808JcXkjqY8wF7DXYnAQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Q9+G,iv:ZVAVmgHPS63toGHPJNwdcCOkqhefjXxH9hThv1NIGYo=,tag:Qea3JyKFOYpLCpTRVkGlgQ==,type:str]",
"ENC[AES256_GCM,data:ewwiNg==,iv:TqZr9y9q3JTzZh5NIwbveC5uglkAIL80iluJ9vQWbcs=,tag:zX8vZOyioHdFyxfeQrGFGg==,type:str]",
"ENC[AES256_GCM,data:j3pp8kw=,iv:18GOi9i9ouxFkpHMEsN/EuvaFGxxGFal+fAZziPne4M=,tag:riTi46hWrquPap9CV9gAnA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:8ptbnQ==,iv:cVXlUx2SXk+L6y77uHj5s6GrjmoDGpOG4ld81B5oxoE=,tag:oNP2geIBv2Qf/LDayPEAZA==,type:str]",
"ENC[AES256_GCM,data:cGd7D4geP8g=,iv:MJiJlL5nvL7Swvae4qXA1aR0oHloc35KIa62un2abeg=,tag:pp9ctHSiOs1Trxwj+yR/uQ==,type:str]",
"ENC[AES256_GCM,data:Q/FtcPPSUbX1Jg==,iv:Dp7cEmm8MRwhMs6kviJlwdpXTPPjAwByHbliqdgPDXA=,tag:LCh0N4JC08ed4A37HoxPyA==,type:str]",
"ENC[AES256_GCM,data:6WLnQmSMtQ==,iv:I0REtKqKKPZZ5m201PtUKaCVHY0GkEqaBmSyzHlw248=,tag:JV5T9gC5IXAnUTUH/iHz+g==,type:str]",
"ENC[AES256_GCM,data:38XHV49mlGW6spmL4EDUlbGhIJpqgQ==,iv:/VUymHKG58BVIQR15CcyiNZ7o/02ZVPQ7lJMLICsPoQ=,tag:LkL1vsYeHdwM/Z9z7g6y/Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:wSgHmwr9,iv:yYRaTZpbh/OWO9aQXRmFX0eHDpOm86AiGd4rKvzAJQE=,tag:EI/8beK5DeqcgBmr0fSS6A==,type:str]",
"ENC[AES256_GCM,data:5KYlx+Kg,iv:i9tMVwJ9q3HTkNdRBCPeaefVRMoAzeacSuH+TqeXxa4=,tag:aOZJzhK0TmX3xaRvxco15Q==,type:str]",
"ENC[AES256_GCM,data:96cD/GY=,iv:GZ+70ep226wRs9iY164hLVrzK4E1oKTkSO0+CkX7Wgc=,tag:Oe92AjbwCpsZR5Sw8Wsq4Q==,type:str]",
"ENC[AES256_GCM,data:W9q3NMuz,iv:JeNzO6Gwbzcz4YsHKlwHIbznj+r8KyVgTqitlk6X63U=,tag:bHFcn+Dmg6Jj7AH3B52hUw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:A+7a8Q==,iv:r3MN/0Bhw09pI0yGf6RjSnn+ewbnrn6hlXQ9KUHedfY=,tag:IbDkiBSewoB/v0wBotf49Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:MTK+GC4QZGBYSYQ=,iv:eMrfdHRZidlyICN+8RxlufqEtkF2En0wi4uMHm7e7Ls=,tag:DHPNdnaTpZnsGmUyw7bLnQ==,type:str]",
"ENC[AES256_GCM,data:uLkRDhuiTfG/XN4L,iv:z1vTG2xJulb9AUPGEXSUD/tnxsZlPlRC+W5ZIg6SXD0=,tag:LQggvcsycx41Zukz8DDuXg==,type:str]",
"ENC[AES256_GCM,data:o5w1W2QozQ2y2g==,iv:uga78tE9z7A1ehCYZgq8MqSq2ZYNsY0NE46qUK/s9/Q=,tag:xg4MDDvyEym+ZE+EDFuVBQ==,type:str]",
"ENC[AES256_GCM,data:CG1N3+8RFcTQXA0=,iv:dgU3mBRL01RQvHlxtX4XyArgJmAZqiNO593UUJf/Xmg=,tag:z7p/dy8r8UJ0/oil16MTPA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:NVL6,iv:MYOBTlsQzDsdrfOHrGJWSxUB2pyQvat8DwqqCv3Bo3c=,tag:az4UWYTGb/XDmtynKQfRtg==,type:str]",
"ENC[AES256_GCM,data:ckW6CQ==,iv:xJzivFZWzh/Um9iMV+3sjBNvvrKOcP0KNVc/ZuxeoHM=,tag:UJuwe1Xr1akxau+9mzLcOQ==,type:str]",
"ENC[AES256_GCM,data:Qcm2f7c=,iv:eF9mXC1SRVhIpsSPqISSNUod177ZnGcqgAhoF1vYMX0=,tag:2RIKU6EhF2LqSLVTUhBNpg==,type:str]",
"ENC[AES256_GCM,data:ToCabxpf,iv:xL3ADOWnNsmZ4N6CdcZNPgA2JiMgeRW1cvhWrDPngnA=,tag:uXibj84YLrC9nYQSwr5wPg==,type:str]",
"ENC[AES256_GCM,data:HvOYCZDx,iv:ImD32OZ9Cf5Aqqs9CoOYHSybpzXkGiCeJWJdnn6Lspw=,tag:4jPx76f0MHTFl1ax8NAYCg==,type:str]",
"ENC[AES256_GCM,data:e0rzqBE=,iv:E73d6TASDFFf73UYyCZVTL8jr2NfcByuY6SUpwA+8/Y=,tag:0GfsdU1NktCsYoNGHqU1FA==,type:str]",
"ENC[AES256_GCM,data:byVLVHpY,iv:UFDpH2U2akiXdRQijOedypAOPwGRCVhcKbRroZjOmjM=,tag:cnqjOgotpC1NqMNqa+rfMw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Q7ysMWc=,iv:7Gorqc+yhNG6gEIIr4IerLSaupb6JrvGizufL6DgY98=,tag:Ij2LEoMEfpBwkp/5SgBPdg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:/Lj6xA==,iv:a33fvV5VeRMbTZYRXbE96vlPEA6aUvMD8/0ENkcWFps=,tag:c60AqiQXw9eQmWLWtYUtAw==,type:str]",
"ENC[AES256_GCM,data:33M6e9q83hs=,iv:L/OktYJ4LFd587k9UWpAGPOctLHtMViQcHp11EM2J14=,tag:6GjBkcL+qbirTs6EdEvNvg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:YzXH,iv:+1KbVNNHVSYCJM8SyprKNnfawei1/gQ3bOwSqWQiQWA=,tag:9G94+MGPcm6iqnccaVqPhA==,type:str]",
"ENC[AES256_GCM,data:rsZRew==,iv:+HflXxJloZH/aibhEe3VvfJiVxpBRrhi7fvzjgxiIDc=,tag:yte5d/rjgRBBmBZc7yvmiw==,type:str]",
"ENC[AES256_GCM,data:X7Ipw8w=,iv:7ar0RhXgXcl7NE+FA68AJBj7Bs2neU95WIJQGFXgqQk=,tag:Gzu9dnTvB4jEibHMXgD+BQ==,type:str]",
"ENC[AES256_GCM,data:Aa5br26h,iv:31mEsIKfdAArIeBmO5oLcIA/bdCGpx3/agX88Ekk4hk=,tag:yzSFSmkHmBOYGDxs0OmFVw==,type:str]",
"ENC[AES256_GCM,data:nzol5sLM,iv:iOg5ikm8TbFFkLm2Xk6sgEgJ83nhWDFp3QaHl6tWpL0=,tag:SBug0xLu9Sy1eOT+eqoX4g==,type:str]",
"ENC[AES256_GCM,data:4Xvu7VM=,iv:KjwOX75dgfdCkPdRVzmFEppf8iknlFiU6cah5NoP5uQ=,tag:ilL/L6VUNVCoRpB5efavtg==,type:str]",
"ENC[AES256_GCM,data:gT0XQ7Fp,iv:VdeuebC9KNTYAjos2jVUWMXiRff1VDhOGcEqA8wKL5c=,tag:0XwgFkyJBKs62prVjv7gJA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:3DsbOYIpcjYDtc1MeNsYEh0=,iv:EF/Buaw1dYiPPrfZaUZZJc2RWoJvFqkr6PidkZ6pLuQ=,tag:VmZr8vPhKF+dcJ7d3TTLDQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:GcXsNUjRhcn/,iv:EN3mKYBAVCRxRelOP+CfQJKrEE1VvnBH5VIs4H/zXVc=,tag:G5b5dkrP2XUnfcyyQyl9QQ==,type:str]",
"ENC[AES256_GCM,data:BatU3UVrFTBrb7MM1N6C,iv:ZVoTxMWR2HRk6mbGDqJKTEnGTebTtc1rxu18AUCjhJc=,tag:kllT76ftBYY2WFD+49UB7g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:8IEO,iv:vDiMiG2jVQkcdumT3ywHTCxeE06pQEN9qH1RNmlXw50=,tag:wV8eHVzgFuL7sj3vwP9L/g==,type:str]",
"ENC[AES256_GCM,data:tm/+2w==,iv:LXWCaPQo4JTucyP99azFPHSvRk0/Jw+1MW91vIGomFY=,tag:269WuerJCSWmpgYY9eLSZQ==,type:str]",
"ENC[AES256_GCM,data:XVeVBEM=,iv:Y9eVc7u8D3/DOoGvjNqMXAIsZhGwlXgZPElvMpdQhKk=,tag:q/0ruLDdx7gXKoA10QRnsg==,type:str]",
"ENC[AES256_GCM,data:wlLKDs/D,iv:GcHQKe4dNI9HCpl5ApfSwMh4N+Fpe+wy3I5vtArh9ZE=,tag:oY6jBvySTHy15xe6wqUnow==,type:str]",
"ENC[AES256_GCM,data:wlnPZttz,iv:iclZiUJ8gW6mly6fiYbYETUk1lpuseS8M7+sgqrITt0=,tag:xEJCoAEsGyBOxlMPevOu3w==,type:str]",
"ENC[AES256_GCM,data:wC3n/j0=,iv:irgaAbbdnH4e7FlxQhrD4h96/e7CjYVDfaN5c5pjX+M=,tag:9Xt/i8XDy1Pp7qqCKNsJYw==,type:str]",
"ENC[AES256_GCM,data:/1MdQtqD,iv:1o0iU13MOVaKJWjeIuqMyOcpGpXayGthyQKWCKtFVjA=,tag:mL3MXq6lF1SRF1H+xxtluw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:J+2vyc1TyrNdAKQ=,iv:GvJaiv8J/nV9Qtn6GuULIl7PMXRUc0uV8WVHFwNS8O8=,tag:sEjdumgXOnMRnvooC/zsDQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:u02idwUtV9vg56/DWMNjDDMjDX3d/gDi,iv:RyBhspDVSi2hrs4WBaoOkzSljEcEluseSRN2fSP5nvQ=,tag:nR6FcHrYSd0QVLwgWyg2SA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:cG80,iv:NxV0oMa2TaDq9vkxwDDCAv0oEA0D87anlz4IfvhWGLk=,tag:BUU3dNGUwdk1QUwhAQt/hw==,type:str]",
"ENC[AES256_GCM,data:ZWoJXw==,iv:edcQjPVF0cxd6p0dXO5e/yYqYA8D04cXGy2Tv7jUVX0=,tag:lEg28/N/tKe46f+zarD2nA==,type:str]",
"ENC[AES256_GCM,data:33bPUyA=,iv:0KfFbAFcnp13zKi1zFnvrBHjdQvmPiBSu06iZkLD8Co=,tag:gj8KiWSYdtNkX0Doty+kFA==,type:str]",
"ENC[AES256_GCM,data:sG86EsUD,iv:yI/PfTEnTcxbv8c5EhAWuIMst2jOi7XMc6qcPIhIkTQ=,tag:vnanOopgUvGDUA7ExqAY0w==,type:str]",
"ENC[AES256_GCM,data:nDG2fMfU,iv:ymnUqlxAAcgsmH6SjbtsL9iLZ3Gd1hx9OnHa5sW3kyQ=,tag:A0QxeOKHrTtV78+mvdD/Mw==,type:str]",
"ENC[AES256_GCM,data:PwioLmI=,iv:nBWY1/K2nyBSwnCHgQVIRmW1zgNWn78H7bKqvGw+krI=,tag:68JCGKOkNyLi0rBGhXU4gQ==,type:str]",
"ENC[AES256_GCM,data:HnuzyZxA,iv:gnfLIdCiJw5oavo3xLLdfb31c7Ej1SzpCDrxPwi3+rQ=,tag:czSomrbqX12IGNxWumC4qQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
""
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:61WQBwc=,iv:weCJR3xcTtdivyLu6K/D0cOi+1AW4UWBaG0gu3nFJ4I=,tag:fec047ml7t/gu2/gXipxPg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Zdox,iv:IW3lmwkucY5Hyck4t3Hs4VUeMwxdpBwKNEzAplqlef0=,tag:+RyW1kCBfQiZy1L46Kk53g==,type:str]",
"ENC[AES256_GCM,data:1WMo0g==,iv:XzyuUVbJNDIufC07lR4V90cmhFYibpDtmduD9yxClG0=,tag:rU7VqRrxAMWbQhph+mzi+g==,type:str]",
"ENC[AES256_GCM,data:z0Cwd84=,iv:5Ifjq2nHeSPQB4x/AiRPkFZaRNZP5/2OXpMwfaeQtyE=,tag:iXWQE2h54t4y0oYEUjOLbw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:RfaNpt76xAxgUM0EC74=,iv:3TeU5NedX0pJ4W3fnqkBmOobUt2UKxE9hs5xyxBCZyo=,tag:4W1RLxZoRYIosU+coN2QaQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:RAu0H5gjl44jPGOPrrQ=,iv:UmpJyHLWDEJutQugGyeNKnLMBuyeE/idZbVvgF6Dctc=,tag:lXhaeLG+JaxFMYPtnCNvTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:9Ld8,iv:xBelSxRFNFAprfpwHU39hmj3ItsSI7Q//rcg8WDbkXI=,tag:MoU8+69Gm72HSKvR9tYT3Q==,type:str]",
"ENC[AES256_GCM,data:EdPD/A==,iv:2gpQaXZwBmSgxUhPsfOd0wQl9ndLUF4LJfsr5t9/8aU=,tag:Vh/xCi2kCM7CGh+MXzmTYw==,type:str]",
"ENC[AES256_GCM,data:5lsO+ZE=,iv:hz+NEwDnDGV+otdI1xP7Z9DZa6QdftSkywfJZVQoQM0=,tag:5G3TA6u8LkrsiTSW704NYQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
},
{
"api_groups": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:IG55Q8lNaswdLzVyQQ41le64xFwpSFLAng==,iv:d83Ibe2upvvr+bSlkpoOChxcXu9wOzYEqHXQvZahw9U=,tag:XCH5VxLv4FeZ34BBBRCVrQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"non_resource_urls": [],
"resource_names": [],
"resources": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:xoMVSp1bjBhMDnCA,iv:qianPE+JEjMrdRkWCzJAN/G4+O0Nmp5rWs0exIUr4EI=,tag:A+jwhrRpSkpb7WqFelUFOQ==,type:str]",
"ENC[AES256_GCM,data:3bfSp6IItoabzwZZ4Q4L6VWtZw==,iv:KeejOwDkCY0+s9Z9In+4kMZAm8jN2PSfJDdZMc4g/Wo=,tag:ujMBA6/n5Av1bsbzI/e8Yg==,type:str]",
"ENC[AES256_GCM,data:RH6vAbc=,iv:kENk9qVaIsM1m5UBlZHnbqhg0bHjkiRiIjOUJUInAoY=,tag:iAxuvN4QF4/srtnHTHA+Eg==,type:str]",
"ENC[AES256_GCM,data:rHOwy25TgnF7R9XK,iv:1x5/BFzKrl5pBIgADPUjvmw4sSYm5Ly0SQX1qW5W4GU=,tag:faH4urYtnMdQyKX/TViRxw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"verbs": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:QYO8,iv:jV4ct4IlN217SoJI+ouw3YnclAFqDRuv6pTSgD/1jJ0=,tag:FHvmK1ZiFe+QQiyUxuYpeg==,type:str]",
"ENC[AES256_GCM,data:1kwuLA==,iv:P75u2B58M2/tDdMpIaEVcQmY2raqxNtG/Ni8a77crE8=,tag:V/88X4yb145STiKT7ZoLmA==,type:str]",
"ENC[AES256_GCM,data:KrneJC0=,iv:IvryedhC/ty9+fGI/pU3ELOb/GsjOv5rfgWB/9eCZsY=,tag:I7V8zffrOSQaKjA9zWHqsA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:iSSCLQry8YM=,iv:mUmJ/bX61T1mxktQIbhsQqVPs/t3lLQOu8sFlF2VUtE=,tag:zBwSWRK70/E4MJMzxYCMPA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:iZ4AZWzw/OmEAQ8=,iv:t4E1mfaYEqf9V+CWMDz34mHgDurK2Nc7LC1ydkqO3qA=,tag:vPi6lV0xc4u7bDHzNVEkkw==,type:str]",
"mode": "ENC[AES256_GCM,data:+2MbhhzEJA==,iv:Uo3awshK4TQDMMEx8TZRdQEMsjnYj3bjGIktzwfty9M=,tag:u35y/d/s4RnPpodYc5J/3A==,type:str]",
"type": "ENC[AES256_GCM,data:98UpsWyQ97IM/BhB1n0TPxwK48tFH/hA7fCLXD5sIw==,iv:k1/M4/cJrftBtcTKhNJWos3nm6Yb7QElZvgcFZbR5Jk=,tag:rsrF+yfjNlJoAt6Pkn/wGg==,type:str]",
"name": "ENC[AES256_GCM,data:oeRHm/uRpaKa1Mo=,iv:OGR1dm94hmvp+TzWuZXsR8yZvy2f62W6BFGR0hWjUII=,tag:BCiy8YvnNrQ9NJQdpljGMQ==,type:str]",
"provider": "ENC[AES256_GCM,data:9qJkTO8fyFW1Bsr5Ns0BMd4L+Rd5djMmvr5UMfU3Kw4K5WufwVmdxE3caRaei3m8naQF2dB5,iv:LnDRhjIKpNWNkQe4tA1ukgV/e1vLE6w0ODI3MF+u5hI=,tag:mWmLxWJkDcVTvzjqFeC4Cw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"index_key": "ENC[AES256_GCM,data:gSrP2uXh,iv:iblW93kMoA19WXFC+uFPNgKg3htV2XGXTFLXxUpRzdQ=,tag:3YNo2tVISQ2CetXVeisPrA==,type:str]",
"schema_version": "ENC[AES256_GCM,data:XQ==,iv:GhcFuLiqepcr11guCV3lJPYXxEXddwb14fC3Gf7GvFs=,tag:fw/6ERxA0v2L2M/ph8KGRA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:NfEemvoEThNXFw5UQBxCAzQ=,iv:y9Bx+zTYO2sIthAnvLD+ieEQ2+ixbvbSha3as34Dvrc=,tag:6FV8yoHFZJnwvWVxX7dluA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:9g==,iv:y0P+9RMZhoBB5gqnHge0CgGBP2XLzl38SUtbcZmriMs=,tag:+QeJ0hCmgqZudxmUG/vN2A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+i6utqIXUWQNi2NGF7x2/8k=,iv:baqfkz2SdREJuUAaePPfvlbSRe3v1clGizgCKHnKgp0=,tag:CLxVEcC01wd2+7EMoFZSgg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:o4D9DFevmdwY,iv:Bj/XRksodtr4f8ogioHdtUWOTqblxwRLb/Aatd3oJrM=,tag:Eu82hDA8d/rs1OmoC8lQKg==,type:str]",
"uid": "ENC[AES256_GCM,data:lmkXTLaWVu5si0gI2Lkeko/iYGRmIqU1qkeSiOGzSmNNOOQl,iv:uxiwVVDTIndDn5bVral8o64VhDU/0Sedc86I6DL8Ep0=,tag:P7rHyXkvkv/riCGnH9Heaw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"role_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:QPBJ+2NZE27TN6/hOtPoIGF1XMhysOBfRg==,iv:ZK0P6TqkLE+2KIpIPHVr2T1zEvzvS6nupYX6e/RypGY=,tag:TDh11WioMQBDqZ0CaRDaqQ==,type:str]",
"kind": "ENC[AES256_GCM,data:OKeJtTdewG9tSgk=,iv:73ri65J/T6cP9lM9vvPVMMDOBk8r6oLslbQqbZZhts8=,tag:Mkvux4aA52kvvHKhq0c2qQ==,type:str]",
"name": "ENC[AES256_GCM,data:OhDhJLcPTdEzxqolAg==,iv:kbrCLphxZ3MaKD+r8NeT3Rk5/JIwbA+RwAf+BwqwmHY=,tag:kXIVTRIxLdLUW1MjmPm2PQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"subject": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:pbqd4wpmg2oPMGIiKCPzoM70MM8/WOisdw==,iv:gAXwmqn0XWPTZE4gb4Y2GoXYeS1BYpSmnaaUFctXikI=,tag:xb+U2lDVGRnjN2ucvoR13g==,type:str]",
"kind": "ENC[AES256_GCM,data:boPRjw==,iv:nI4J+ep5YM7gUaSpy+C0hcdfs5Dfzv/W1XGjrIfWIs4=,tag:M0hssofFz2E51Y83HrYhmA==,type:str]",
"name": "ENC[AES256_GCM,data:AebYE7b5ubHVMGsmBd9/QlZkoMlnaQ==,iv:a/IE3Vh4YE/UIidvHWG5vVEHXUx6DU7SpnwWdoIFNyo=,tag:66NPUfHulQZ/b+iuLDecbg==,type:str]",
"namespace": "ENC[AES256_GCM,data:RccxPkxuLA==,iv:N5z7L7x5SEDEji24HXtncPecxerPqPVgioqKmn7irp0=,tag:63ZERwUCG+ykbcqnJo9bjA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:YQkqjVQgXSo=,iv:6ST7GniZKTDitIMQqgP03XVfzaPn25twr37nScPlJcM=,tag:nDwJhE/X9MRYKuPKFNjW1w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:CXETbx3BfFcbjvFbJ3At1OspiCN1FH78geh5Q0vkZQ==,iv:5Z+83Jb3hJVYBvQO6jfP92mmfFryzY4zlAAnAg9ScCw=,tag:pA6c6rSQGTjLYx5FO+KMjA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:5gxb0GiwsP2yIzo=,iv:+2t2Eub45VMrus32qYdx6TgFzpCMoQqfYIdbnC0ZkWY=,tag:I94JYQYm213Mz0eZXNkakA==,type:str]",
"mode": "ENC[AES256_GCM,data:Fnutujmlgw==,iv:7xE6hcnwqKbYwnX3oQ0VilhrGUSh45XeiESaM6aGv9c=,tag:bAjc+RNBvf2aHzYqu1TleQ==,type:str]",
"type": "ENC[AES256_GCM,data:LxVu+IwDkWN+6jbmt16fwEEHeUK9K4LoMbpzmzYi9g==,iv:5Jkt7ykHlogAokRX7sBo7bU5TslipcrlAR84+W/ULV4=,tag:FcR5JXquV/a+NNAd2cvWMg==,type:str]",
"name": "ENC[AES256_GCM,data:+KhQ11wCrtjkex+xmDateF7110ff5Dhg,iv:qVeUU5OwmoqIlGVjrPDQlDqB3R9wNLimCUrIvSUgnsQ=,tag:Q4gwDoxSWNxxfkkOavU2ZQ==,type:str]",
"provider": "ENC[AES256_GCM,data:D7OeP9A0qjtmg/eLTeccBSLpNr6oKdBoSAt3ujIJ7etbowTl2XMTXr0xOm7sDGRaTrgvmwUd,iv:f47blBXEg3ktjgFWLuW+qmt/dQwUYxBrl4sRCdwg4YA=,tag:FaYhfYlQerNL8QfA53Am8Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"index_key": "ENC[AES256_GCM,data:tV1j8w==,iv:9jGS3i61AnuwpK0ws7/o/JQm6aDSp4VVIUIZJuWmSkY=,tag:LNPU0qft2QN9wYbzG0ibXQ==,type:str]",
"schema_version": "ENC[AES256_GCM,data:lg==,iv:F12PYEBV+LDLNYtaYw7RfnwClY3ZXup7enwHQWnzspg=,tag:qWnMPSsfsz13K1H11/0T6g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:W7ebqWeM3x5awdi7rPfC7owD6Yofv/O0vubX,iv:55KOohfr3Ez3UHnAOPhN5pROtWTl/GsiZ1PisC9pQ94=,tag:f7EZRTtbk4IjJtZFarRRZQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:vw==,iv:zgDQXM3ttFLCKghA8f1I9YKScdZ1JDShCCsz64Twyk4=,tag:HGd2R7ChCI0/vVBgC0PfCw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:iCRWpJCeNvf6c1ywxeFa9czAB7dK0ox9Uizn,iv:8wmeJbaeDLQv1IrdM+RMS2R06SEsRaUwPxxYG3JSyjg=,tag:XHpp0W5U20ajKke34vqWEQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:DCi8gzBJvbZ/,iv:oqGSGJamrYIRNlpnrK0GvbqdBfHoGMf8wBK8ASG4mv0=,tag:cIu+yIMSRC8yMdipfzJL2Q==,type:str]",
"uid": "ENC[AES256_GCM,data:vv8mtjiecXyS99J5Hd1OEkiYwRPAgOpFpw9f8K0ck24+OJtE,iv:k5ebxnaJRJkGlJWO3ufUse/lRzCvicWOSAMRcE5Prdg=,tag:1DdV7n+bL+T/JWifGT7Jsg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"role_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:Yvuj2f3K+ZIiimOrqvcKMQJOz+8af1tawQ==,iv:4bMrd8oylv0w0+grfk3F80WLXaTg3Tzv/6ZzU+0CwWA=,tag:bbaq+vY3sXXAcj31xxa8Rw==,type:str]",
"kind": "ENC[AES256_GCM,data:ThhAhpwJZ2RZkIs=,iv:kqxjYOpV9dXhEEyz5ZXweNrzYreYpw6SvufMQk/IQHo=,tag:vDqZEs4WcnBxNvl0f5tdwQ==,type:str]",
"name": "ENC[AES256_GCM,data:EtwcDTkwQwik1TftHGwn4VH1kL1vWQtzfqqBbzg=,iv:WQ2b2aAm2xqK9ey9zS6vN4WvMq5ohlgzRCgW9LZylTQ=,tag:owqfLzIiPwVNUwlQZWac5Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"subject": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:aozP1rQOl4fuBXxKdx7QVLN+Fqd198Feow==,iv:h7cqaO9Y34Aucu0iVmb+i/0o2DQ8CItgBcub4HpzPXk=,tag:ouDsYfmkC9LXbJgwhvkzMw==,type:str]",
"kind": "ENC[AES256_GCM,data:6cfC3g==,iv:V/WlW1rNaMcguSqAoI+ZKIZ5Cw0lunt2w2Jom7aVCRQ=,tag:hNKUbZkPF6jkBJgv2pSGsw==,type:str]",
"name": "ENC[AES256_GCM,data:quU9a5dINDdno8xjWPf9FfbPN8qQ,iv:JmTi20wcmA/RqTthP7z5ABZ2FEnVd2iAloK6VwrMA1o=,tag:94se4xXIgS6Q7e0K7/RvNg==,type:str]",
"namespace": "ENC[AES256_GCM,data:4nXuGfLqCg==,iv:jwAgSKNunn36KkIcNeMKxTeSE1cYYPJXhpZVRKApBo4=,tag:egr7sBRdU8YouJuXvjDFpA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:RBla1sqpPIc=,iv:nrYz7LArLedsfZYQjj3Wf3zj6u5PSs7r3IqJtIbK8S0=,tag:HCCF5MKXS62LH2+Ek1dO3A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:LCfwkrIoDP3msl6Bb6qhrLWBp2y/JJwjKb9nKu2Wfw==,iv:OQQqxCHsvpsJauW+5zOhSSOcqsMNh6K7fov7a0kjj8w=,tag:mXUKMKfZ9WESRuTTZsVr2w==,type:str]",
"ENC[AES256_GCM,data:TDdtiojZehQi6veOSX73M5qCsoQOciyO6PMLsSFhoBLJTVsBwXhlqeyJTs0VEXbzHRisZZ8/Lzt1D+Oy,iv:+mY5DroOcG2pHskAvNjQasv+t7jZrdQijHmima9cwIw=,tag:rs4l9uazdGAGE6/BEtmhTw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:SKtFi1e1sqjerBM=,iv:yJsLuWHRnJWSBB2LlyXKqkwnbsHm9IyDmA0MFb0n0bQ=,tag:Qd2cU79D03PRvB9Ru9R+CQ==,type:str]",
"mode": "ENC[AES256_GCM,data:bEZBU+/lsA==,iv:3oLtXylKENs2KDUbs3wu8rGvbchxZF+99g2eXq//y/g=,tag:h8a+20lZQ3h5lJXz7UndPQ==,type:str]",
"type": "ENC[AES256_GCM,data:Q5hHJF0lzPCCm45vAN09grWxEUqi,iv:Lmj9aAjqF0OVhw9rfkwJQGJ0ntZthkKoyDnPbLdKuHM=,tag:9J5aXXKF1DC3vL3VZcEs8Q==,type:str]",
"name": "ENC[AES256_GCM,data:BtZeGyXmlwrpfw==,iv:KVXVdrCNb+MsO5bQd5w3G456GoLXfy/XCGjy9PCZvCs=,tag:BbE8nE2ZvkU8fFRhfjuuzQ==,type:str]",
"provider": "ENC[AES256_GCM,data:yjkB4UzD/UGMZ4w05vBW6NSzPCst5CG5gLGC9F8gW74WLmuUtZByhvJQ2WLxoVrqwyXvobBf,iv:cMXiVSqc2lvUJWIVYoa0mgy7wbFVbDo27evczkCMwUA=,tag:2ORicqEwhw9PUjec6dqHXA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:lQ==,iv:eaZbhMr15R4gzSWOhVLSwvJBOJIIz+qwnnQAA6XhnvI=,tag:nw1o9kK5sTZtj9tC+GD+bg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": {},
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"users.json": "ENC[AES256_GCM,data:jPsdyQIzBoyu5W9XgxfDzst+H+OJ1NCph+QtHLfofF2aR6PRANMfxkKrEbBwFXrE5r3gi8kLM52dPubHrW4IdboDJjLTW3SuqaFc+c0mD1fCxx7awQw8CNuEImFFFSMAhM2jV1KcfkpnavNWH3h+q0Hbbr0ojkh7dXR64aKRcEi1RcRY2/lja+maJOoi,iv:6PGi0eO36p/mK+ssf0g9lMJH+UabWqExyW9dWKHnkKo=,tag:A+PYpw7HPZSRfnL8MUps4g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:8OepV5AHqrn4fnVIla7rI8MO8hTt6RoPZQ==,iv:EW6U7egeHQr1trIynCpqcKs3uZ8XwrCsIXjali9ruR4=,tag:/g/2G6gEjM7gpvx8Nrhb+w==,type:str]",
"immutable": "ENC[AES256_GCM,data:0bW3J7U=,iv:NMA4SMA7EzJEivLKec43PWuhKc2wHvEujaJZNCk9zA0=,tag:vKvnJt64wQOnUvz3cSFgSQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:BA==,iv:wLdxQLRdVYEAYjgvchjlNo3VIATwyo3Q0HZdtqCHLpg=,tag:QLonMHHeA6NcbKjra7vAow==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:fdIEa3leJN18mZBStig=,iv:mZ5uufjMUD9GSDegTEqrDuevgLmsqo7Nrb+jyr50PxI=,tag:uAfl4L0Lv8splqGXrBBKtw==,type:str]",
"namespace": "ENC[AES256_GCM,data:2nM4Ie9dJO6gyw==,iv:hmbCCIJcNcViWldkqV3kWDnGpvYOqXtV8TdsHL6D3W0=,tag:G7j5kyw7RHOFsvCleSsnOg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:Ijio54rbObwH,iv:AeOa99SgxAavWDR/D8EQWIPyaEXceZ62MaKjk3ZUJm4=,tag:a0UaHUEIqo8crznANYwdvA==,type:str]",
"uid": "ENC[AES256_GCM,data:WvFcc5BM9N7EIfAMJ3/ffjPHamh6wqE1KQJp5gTNLiYgdIry,iv:B8pLqAGJRN1t84LxUT21CAjLeuNRxJj4UxL5pqZsq/U=,tag:tQkHaPh5oRwaOAvbk1e91A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:pAdMCRxk5ks=,iv:mlmVVuQ/ugblW/BOpigUxkqhFNguyrLZESDOXjcOru8=,tag:LR0x/IvuwCPvh371m2Cr8g==,type:str]",
"value": "ENC[AES256_GCM,data:70LVow==,iv:M1bkOiOpVkjAwCP+gaUak/bct6EfMb8G2W+VUtfStMg=,tag:R++vWoe5CKRB7EdMK6xzGw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:hy9RouI=,iv:yk7GMoVlamd5XJgQu2g483mh5+3CqHkwJtAC41oYWQw=,tag:MPGtaxoUyj3m2FsQVMnDBg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:Nqj/xw5yPE4q+Q==,iv:UR02PNzVZC5HBXYKlQppwXP9bjAeCyXwOprpJg9ZKuw=,tag:p9ymXXDO8RZ9xhNp3c3Xew==,type:str]",
"type": "ENC[AES256_GCM,data:4H1/bir8,iv:GrQ6Nb4FHqQ0j+qU+AyTzNVy1YarvFy/S5E4HqVHNt4=,tag:kyaig1/L/6ETDg9wNhic5g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:u+TsqAAulGY=,iv:b/GFyC7j+Ve/R5GAud4TQIi8yDOOAWKwr5co4Yv0FY0=,tag:ew1WHmIw59LfJBakwoHUKg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:uHUPx7Jh7Uy0d/EYH0Akm+C4XJJHBgntEqS08fU0vw==,iv:H9Hf2fOKKC0ueM4iNlCtr1A31o3Bax37LjxNp4zAXGk=,tag:HdgnbsbrYvCkH6AouYd1gQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Jbz17xNdknoPlV4=,iv:iSjxllMfM8XmuOJyQpBJs9eimGjj7BjfZUceggrVmQE=,tag:joCJRX6/sTipx6+0VhRqbA==,type:str]",
"mode": "ENC[AES256_GCM,data:83+YXgeP2g==,iv:HD5JNadxEfWauSzWZKuNMapqHJZhJba5o5u2c3BLnk8=,tag:zxv/wF2hlfllx0pxi5xYnQ==,type:str]",
"type": "ENC[AES256_GCM,data:tB3vCnInCv8ZN8PL4/47NBcmPUN/6oMh2Q==,iv:spoEWrlsJ6o5fplNHdGJx4yFQbRNPKdwKevMifkPEuU=,tag:lD7fIOphvrmY3+0GogEUEA==,type:str]",
"name": "ENC[AES256_GCM,data:vDI/rI7YvgyCVRBsVgvmGS9mzI4=,iv:gt6nIre9FuSePcoXK+Xc4pSwq2fa8tbSKZtUXy2TEaQ=,tag:74nJC54iLBhldnUnpNyYCg==,type:str]",
"provider": "ENC[AES256_GCM,data:vbLZCbSDPhp88qUezi00UvjPksoNK+RRbCoKM5nFugIMbrPNr9qc+VpdnecM1EwIFaT1Cttr,iv:8muvr8i2LVw8drlATEqo4INFI8B2xKSFJEeBgJnWXJ4=,tag:eMEnpOLpleuwOXifrD8quQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"index_key": "ENC[AES256_GCM,data:zDhTnwRtaAYi+Jg2hWVWOKnf,iv:G+G7pIhNrJd+7up+u8vUPk9iD7hwgAxXF1X4TqJHfm0=,tag:MXrWFvQ2lw3vjy6Kr8doxA==,type:str]",
"schema_version": "ENC[AES256_GCM,data:mQ==,iv:mwml2q7RW9wztNCkZ3k0stzKgze76LCi3tFnsP1MeX0=,tag:gw+b37KhgDRhSlpSCmbGyg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:xT9b0uoTVIr+zgyYBt7Dqz53jcEdTvzS,iv:TNgUXgFJYg9/lK1WYkyRglsB/tzoIZXXsWXJ5ngaP6c=,tag:KUfmfF0KLzaMQMtucHsAoA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:RQ==,iv:/vWsH8hSzKgF3F4Wo0EZAPfig3i5fg+SQSe5SqR/vwk=,tag:Un0acAR6rKZWLVBEmSsq6Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:t2rMUkWwXKeYPA==,iv:1Xp8fx1Y0GvolRQc0pnRtgeGsNUlsAh+KH7YYEbp1ZM=,tag:Orsem3kriEz+iN92kYifDw==,type:str]",
"namespace": "ENC[AES256_GCM,data:BAIWbKwdmwwK/KKGBw==,iv:eH9zs+XnHFZQj1VRQSCNfFRIRHw7TJfu/lFIa2iDExc=,tag:FcQwxKZakahPdtNxwgHy8g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:5WomPoUNLFrU,iv:cx97ZkWLMCtqFE6Fuwv5T+04k/Layfyx2wMSbNLzt0U=,tag:EVgx7ljett+nfaM00W2EpQ==,type:str]",
"uid": "ENC[AES256_GCM,data:zSHh2p2forn7fZe/+KGAyiI1RU1GixrHpDNQ6hpEhGJTu34Y,iv:FTYzogrdQLQcnRTxgVgj9N5EH77V6WIWQMbDE9VJGrY=,tag:2rS7WgEOCvKBZWlMWwah4A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"hard": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"limits.memory": "ENC[AES256_GCM,data:MFHL,iv:Cfnu4w8NvdxyiyYGVOuMbV5zBJdnLClRjzDwNGCenfg=,tag:AQVoWKi+NOgjaoLhhVEG7Q==,type:str]",
"pods": "ENC[AES256_GCM,data:COg=,iv:eQ9eva5I8kiYiFW9guhx4+FkNCWJEI5jYf9JYwtydR8=,tag:zsE3eNdGlX0+xpLw3QD9Yg==,type:str]",
"requests.cpu": "ENC[AES256_GCM,data:mw==,iv:C86eUg1UKZvk4J/bXVW69DXTQAbpPyQkuE3pbxPKrGI=,tag:wJRkdKhak+QHENhTxckwBQ==,type:str]",
"requests.memory": "ENC[AES256_GCM,data:3T1c,iv:vXhb8thHDMNU8Jjj/ux2I1dlFLi71clXDxx6naubmPw=,tag:Mw60hEu8Hea4qfRT1fCP2A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"scope_selector": [],
"scopes": []
}
],
"timeouts": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:Tm3QI4BP2vizk2znfJYa7z9rK8hnjhojtyzWUsTNYZyntsLvSHJXTSeg8TMBpcTJsh4qSqrYXnxsGQmNz3VM6PO3NCkXpW6NRFTD7tdj0f79gig2FwRvLzJ/J7p1m1xmErmYxEqQkM4rrhVf0aUK7w==,iv:ExbXeu2qK2bQ9m7FEdFNd8oNFzXS3w+Isi7NDQ+0bCY=,tag:vRkMFUS+MyLqJ3yExP17Bw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:++7UO46kLD360Cccvrl3mBEdvj6djhB5oPgPRsSN/g==,iv:QKfQMbv2J3I+XhDCKH85UvqDX7jprq+/rNURGCdkZIk=,tag:N1qrBcr+bnT2MITMo1lsvQ==,type:str]",
"ENC[AES256_GCM,data:aocRogrBwmZQ6ZFi8ft/Lj01DinhepQUxNTnws79ymeKC0qvQF2ZEv7bV/MxWurZWhDG,iv:Ge/wZzjZLSo7iNd4qf5RAqjFcK9ZniEb+qE28fDY8EQ=,tag:YdPzF2Of1fqVkrlUitEqig==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:/3bhni1O8L773jU=,iv:xb1bFwIqPGiaqkPdGATgacMJUGc6vNp6/LlFj6aeGKU=,tag:QhYQ8ouGsSCP3jtfMaH8wA==,type:str]",
"mode": "ENC[AES256_GCM,data:kGc5cBMJOw==,iv:HeRbsNJn6CfP3kfvPyIobk/bmL/AOpb1u6FW5BLAWhA=,tag:aUvceJ6lFLoVjvRlWjN6kw==,type:str]",
"type": "ENC[AES256_GCM,data:r8aLAYN5enVnu3BQ1Jz9V3kqtmpJqEA=,iv:TbPfvY2CrB9Lqj9KYfy1EfwUb8AdV6dyjI6MjZM1qFA=,tag:PZFsIoBhQvYMXUUL7GfYyw==,type:str]",
"name": "ENC[AES256_GCM,data:lg/IAgWsPD5nH9mU6mU8,iv:16EjHmHXd/OK0ii04/sK+pfsBt8vt1vwVy+0z6CTOpw=,tag:K/U6ndZz2zGikzSeoqt8NQ==,type:str]",
"provider": "ENC[AES256_GCM,data:SHGlUIzzgg+Ph84MHlUWtRmOKgr+mNndRvTWc+GE65Tc6s7yZ0jBcecbQNsGbcalQU5PyCdt,iv:LdqngATshdG0rDeKHoeXUwZ4RZdyIwPmlM8B/6bSiAY=,tag:HCpELsJOEF+AyEPOB4chvQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"index_key": "ENC[AES256_GCM,data:ZhthyZDxLwcyLoel9jBKcais,iv:xhgyxBxclA7es6VF1xRARFizc9ASuFH99HIZwzK7joE=,tag:bWd0aqmva+XvWZJrC8ciyA==,type:str]",
"schema_version": "ENC[AES256_GCM,data:eg==,iv:IR6o2/i++l4g/sU1KhbfF46GAMjiddoLeQDRRciZz6o=,tag:Idx8AAD06eLYCnE0Er8iZg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:nPrY7BW5jNeDB+CMd0STrgT860ihRgZeT7JaSHNx41r++Q==,iv:shFTfHSnh7BrUX8WzzWxKNX+FZCh2nqjOMiycKEwZu8=,tag:A7mPWJzdtfY/yt4jcFoxOg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:/Q==,iv:dpw9cFIxHCP2DWD97bCaI/L4kckIESRBMUuSvagtUJE=,tag:2hkWDmJVGTpSFE62yEXnFA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:GfcfdSfTYPoVs7PMqgBj2r7I32E=,iv:Z9u2TlHOpyWN1nKhpFlM82EW7Fk/jiap/ZyBP0KwsYE=,tag:gFWcH6MYo6E+XzraXDyN2w==,type:str]",
"namespace": "ENC[AES256_GCM,data:tH5uKlZdJEGMTJzYHA==,iv:hPmYdzrCAElrXQaw727uT7rxANY3mylx88G8REDs+SU=,tag:rPg6RhrHiJr8tJPjp+JL5g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:i0VUeQzbMjeh,iv:CCRCI8I2b48ziUNqAfcxS2kSwH0Lxa9rEbtau3ZREH0=,tag:Y6aQZuKfkV3bcZa4Nlj0wg==,type:str]",
"uid": "ENC[AES256_GCM,data:d73IDSJvsywe984yCyyH/UpAGRfDLaEbAe3mTqKHyBF1llPR,iv:Hz23cfYWA3IafzTOIAyAjJ9VgEdmefXluN1RHaamN0g=,tag:J+8pSfNMBnwbym2qzZYtag==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"role_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:Pkpxlz/yDTsQddb77Yg/PJOyEz4MO5tNXg==,iv:40jtXVpN8Q8SBzS19kR78AffvdPSc9OVE7NSdsmAvn8=,tag:lbPyD1PuvLuvKWnX4WX+ng==,type:str]",
"kind": "ENC[AES256_GCM,data:xSg0vJmN4xTRqRM=,iv:gJTZXkbz8XrIXNgP3tQb6EGnHmLgIkI0nNrfiDRc2qE=,tag:pSuVdJdL+D9/DNM0v0KdVg==,type:str]",
"name": "ENC[AES256_GCM,data:3wuJSWA=,iv:fH1coYuvVd9+3Yq0lThM3nu+tQyvvn1+Y6nViiNYmaQ=,tag:oCxDo8e3v+w1D0XQfhdnjA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"subject": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"api_group": "ENC[AES256_GCM,data:GyQNQ/L8cKajcyJUXdkNKBS/mEKS9R0Ktg==,iv:znYdDU6H33oCBlaQ52RXn16RHYfPvtI4yNXFa0sLfNY=,tag:/E3Z2ac0dERlrE9KBZBGcQ==,type:str]",
"kind": "ENC[AES256_GCM,data:U1xDdg==,iv:PMZJfbCN+0mnerJ3BB3jZEyzZ80S3gvyQDtBDWZX2cE=,tag:fQCzsF2x169NcZYqIbdLkw==,type:str]",
"name": "ENC[AES256_GCM,data:OXr8q2BZVIathQwl36ASPAiNQGdq,iv:jvvhTFICzaMVxmbVZf+g4zQEGRyAnt8rfz479mhoFuk=,tag:oGjABg/c0wVXUGMPQfTe/Q==,type:str]",
"namespace": "ENC[AES256_GCM,data:HM/SWc+gpA==,iv:1QlV7jXz5gIvoFAMyQXcXz8TZQFGx2sXpkye04RUyP0=,tag:NCR8GczPjes9Yu0sSVlqMQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:RS4xewOevkE=,iv:Eh7YfAhQEcRZ2CXeTW7jEB5j3jF1ovxaXIXm8CcrXyY=,tag:mpxTP9hwcPCvI2uTd7phDg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:9HJU4QR2Vpx0vgLIb4ArVDHPVBuBkGBjoZfe1p79+A==,iv:5u+zCWxs34PMl/pmZf4CadASv3z6NYR8LOSfIpmfKBg=,tag:WM3VEuigmS9NGXt9I6FqqQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Iwk4b/fqjWedID4=,iv:68MaSOyAqcp11wNxnk79U9ykkpXVM/kFaOQ62yo348U=,tag:g7oY9nhI/JhQWTrEZU6/1A==,type:str]",
"mode": "ENC[AES256_GCM,data:yAl81LbfIQ==,iv:tVDkZicAqt8ooSP7nGcTCfzTRcNm35Z+A0fwUSyFUxo=,tag:F27bHcQCdvIF0UBXIA3iBw==,type:str]",
"type": "ENC[AES256_GCM,data:TnnQCLr94YSMTdht8g==,iv:DniNQZmMQ5aoen866s0M/uCgNwvHu4scoMZvUwBKh9A=,tag:PELof22Q9Uvz35HjbmdGpQ==,type:str]",
"name": "ENC[AES256_GCM,data:7JcZOoJQ5X2JeXXVEcf/PP04AopO,iv:/4lzG8FPBzoHKjkWrmY3j3mOMGMuTMHMMWkEF8cR8O4=,tag:EJWkajeg8G5xtdSH8YbXUA==,type:str]",
"provider": "ENC[AES256_GCM,data:s6W9nqasQE8EHuGcepFfmhrDPiZgupVzAwRTV+tj83ZjIAEbfiNlxnQKCpKfFkxt,iv:qdLr9Vo1oSP8pFSROwoQqWefvIxP2gKgPZwF7Z/iC/Q=,tag:xFLCurwr2kuiUbR0jNzIMg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:6Q==,iv:6qqi7LHuTa6nSQkJSMIGoQxF2Rys0giNWKxavDtv4Zs=,tag:oOohl/A7JHyNV3fZkJumKw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:aSwpUTECUJL2qfamp/HC4WbzwQ==,iv:c8MCfo/Ldaiz0INkMpMWE7H1letwwd3oNDyKUwuytoY=,tag:Zc0S/yiZato1sJaEnYIV5Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"triggers": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"oidc_client_id": "ENC[AES256_GCM,data:zGJCo4nLGivT4w==,iv:askqDFcgawxg4CBrfa1lgF0gOgMaeNf4XIBP+joMbuY=,tag:rxYkgp/f1rG23aEp05dLyg==,type:str]",
"oidc_issuer_url": "ENC[AES256_GCM,data:9956mYrEwBDAkEwuD8Zm5V15/1abbvkcL6HqLcf/rGZFFwFukCh8f78Hb8uDNfEHQEUiMc6paqL9Lc4=,iv:SiX7a5cnfw20eYSNfsWsBEfVY/UvMpTw7jCIb5nDla0=,tag:b4f3wdqf6FW7OrWimtkxRg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:izCXa01Oo6DZSbo=,iv:WIfc7BXf92NGzRJWAHh7VSQXJ05HxFXDVWJN2OkbZr4=,tag:m7VUG2HSBALuxEx0OnfHcw==,type:str]",
"mode": "ENC[AES256_GCM,data:pksalUwf2A==,iv:4zfopf/Ppbe0f2JdQePCK2nUWiJb04jtysOx+MI7Bwg=,tag:ps3UJdoxrWgn+W6M4hvwJg==,type:str]",
"type": "ENC[AES256_GCM,data:Fpj0I+52YVVMMVq57A==,iv:xTBrfjDRqW+1ctyZTWDQBim7ZMjYCUjVdYKm8LNnhuY=,tag:Xx0BVy3ivM9iFF3ZMVy7Aw==,type:str]",
"name": "ENC[AES256_GCM,data:cvWl+7SrF2ljc84u,iv:SvvrxCeaPeK1KE/Z+qOF7Ct2qPWrIaRwPBoiFEd/11U=,tag:TOvENHbLSktPbTuE4wsB9w==,type:str]",
"provider": "ENC[AES256_GCM,data:m0B/nLEemWZ2cEdvpR8gLLLxWAH2c4EKFtdVWHKqDCvOZrBf3MYuyMO5Z/yckIQx,iv:JorQrusyVMgnJoFoAlZ0YECcbn/aoAnr1BjKARVCSRA=,tag:LB0rPJkWqxZZDUugissWww==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:KQ==,iv:9SXp7q0rLtwiGvuZldvJPfeEGMdqrYA8Bs81vgc54bk=,tag:wUEJUMBliXKPrdgMkwC1EQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:cUYX9uv7uiyyLBOz7RIG41sY,iv:b4o7Hj4eCmHqA1uCid8k1IRxIGjIWdUrnaBJZ7uYJRQ=,tag:Q2KogOBywcWgZdzzoJPwfQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"triggers": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"policy_hash": "ENC[AES256_GCM,data:5063oEYUIocqQ9bI68XXNg7lc2p2UBDzSUoflJ6p2gAtGZykZXTcLe1Gjddmzvkt5ETdw9NX/wF+Idcok1+bDQ==,iv:OqBfF7ozgJptpC/vYqh6VUrRVAacukpVdUz60DS8YgE=,tag:8d5ug2GhmHcTVPxb2bo4nQ==,type:str]",
"policy_version": "ENC[AES256_GCM,data:Eds=,iv:sdNg0et4GdxbAt7mTzOSEiMdg2Vj8yWMHWqDjD22IzE=,tag:kY4la/TycSYnBYYL8pPBtg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
"sensitive_attributes": [],
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:+EjgPRBK7FdIpmi0NrshAptblIMtlJVzM02nMhgJUXy6kSNXtOnxfkkol/z0DBM=,iv:BAG7tSolh7oIKr2AV3aRoCIlFxCTQNnqOa0IuuVsO18=,tag:400cISMF//P7JAr+EcYG6w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:whif/8dLQUPPq0MLmMnokGZofjfM0kmaP3UQKUIMzJLV/q0sfq73TrA+3lLLXuXCrsxk2zr0,iv:2bKi7D6varU/qvZJskwgJVGc9pTN44chh20X3o8GrE4=,tag:l3lG74hS6rbC8Wcqg+lftg==,type:str]",
"mode": "ENC[AES256_GCM,data:42QNXiFbtg==,iv:JYqAm8vYuQ2NzKmsFMz6WSWsEc7kFehk9k9n9QSP1aI=,tag:gLHQXsPdQVfG2XaRf309ug==,type:str]",
"type": "ENC[AES256_GCM,data:ehdJp+zFfK85G9+wy01gPTw=,iv:NTVCEqbHowu6eeSsSyImV7KVOdzMd/5WVckk+1otZOE=,tag:CHzUgFFpCHH8NOMzQuaq4Q==,type:str]",
"name": "ENC[AES256_GCM,data:cSimGAT/aYeuHQ==,iv:uB6cCbiOnjyvB9LL37lZsYDBLfcNJvDs5fbaWiki0fI=,tag:OSWjtqcEowsr41em3LP2EA==,type:str]",
"provider": "ENC[AES256_GCM,data:UYXbVXGoJ5l1SJXH9eiqiycm+0pGa3QGrkxkREMdoe7YFoPvZ9UMznZcioYu3gQEO/3UsJJX,iv:zQ2o5DfaLvfhvruk5EzEiQfwPeKBn82YsMOwG30ph/E=,tag:SfIh/SqLyrDH2/B56PzgwQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:kA==,iv:UffHXIjaI0I5rYLE/0mg9zBxS93qtYksZdRT8RUR8/8=,tag:aWkP6QU9QD6p3SG3avg1gA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:gHvaVYEkWmfOD10LVWptCVp/4qK/j3r0PfvgIh0/NGQ=,tag:kMdc6bhc2V34jMsPo/civQ==,type:str]",
"tls.key": "ENC[AES256_GCM,data:jzVgDc/17X5rc/y6CjbUMSWReHDDdVwuKjCkz2R+/K7jRpcGffyM7m3r9YdI2rO10OnWHc+SUjI1xaBvFOIs+4BNF3IIsRJQTf8qWKJjRBVtStEvWgcmU9YakU8+MjNntIFQX+K043Oq4P+O21lWqE6Rm1bT+zhkvmRjAZ7OTq4YVh1CoR83ZtocdKjObhoCqOqrMgAcZOnRA2rf+OEn2N/EUR9XIIZFlN2Jdi1inFAUcn5HTVkFvchtJV/nndjvplCU/mbf85D3dlWRxiua0QEOzhRqbbpRmHJNNHL8/hteAG1a/hlUxHTtn4ZtKH09jA==,iv:K+LecZ5gSB0YbCf8PxL+B03hfugA/q3TpeY/77evGSM=,tag:Hqj3dJBpSDnypGFQsJKYsg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:lxIGfne+RBb4NQZmoY3wodRG+PLpmgwx,iv:Ck9wMnGiuia8+8W3X6zl2uluu1qTlrHV1x5f6o7py+U=,tag:jtO43WGcORhINrvGhgTEKA==,type:str]",
"immutable": "ENC[AES256_GCM,data:w4ZzWhI=,iv:t+wgz6br4itjcbbL830FUfdJWQEDkC73Ef3AK/8c3os=,tag:+yK/P5MRtJ2xAEldU1gTDQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:wg==,iv:Ya8CxH3VpV7zByTSyb0cm8ZYfCV6cKCG+ychoH6pvMY=,tag:maee13bNm+7n/tZprpggdg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:d14CjdYxHCqa2Q==,iv:XUAYeerkUULVng2hw9J55PnYWgU7m0YEF+1wOyjWt4o=,tag:geVZA3KGSLVb4vPNdjd6bg==,type:str]",
"namespace": "ENC[AES256_GCM,data:uWQoiJkhBMyE/jKEmQ==,iv:kRthkWR70zoeAoM6xh0cCXzqv8GWFcvj7wivATskdBQ=,tag:mbEzYlStQsSqky7EpCD/bQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:GQVznbv4Bdz6,iv:1ZdOcwb7nttvkWcTivLai/uXLQdSwTGQ/Z8VeJ8cUYM=,tag:xmXfDVK5JozWICK4ohQe1w==,type:str]",
"uid": "ENC[AES256_GCM,data:v3USCNdA+Ila4yg6hrrgxc1ZmtVqBMQKGDWagIjjgNO1wq84,iv:Q1Y6U/4zmI/6o3M8ckAWDe6cMNTJYkEwpZRi/l8s4/U=,tag:296aRUg3x5mIbs3ubTf2zQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:c9ur1VKja40eANnUzQoHaps=,iv:G5enD8vsaSxcQl8RWIaoOgzHqabyfIpVXNCQGQWPC38=,tag:cn7Lfvl+NzVuSWbX+LCXIQ==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:fOpP+A==,iv:kjvkLvktrqQJG7lFFuUnAbugeJlCH3DxJNhcDGLFLE0=,tag:MO8/nn5PGbJhScDJrlTwLQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:okrj1TFdupgluAAJcH5GBPdRjGbfDybgYQO5UZs/6gFSrCiubpH9Gy5LX5e7qyd0xTfZm5ZL8AnGbDfEfGjjZ0n6v7tUbDZNP4TKuH8mx5CrSAE8,iv:jNJrKrriqcybC1YlaoNNJ16H7IREpJIG0SoSWDlJXio=,tag:REPAeOMx8qt+KqLSlaYYRg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:GhlQ1GdpUI5CfgVfdw/DqhpJkygNvV4Wcpe1naMbVA==,iv:gYmFWd7a+hMHGs/u7isMGYQdDglkM51F5YhZC8bXnJg=,tag:uodeYhv+6xwT5ktAhZpZOQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:18Z",
"enc": "vault:v1:hLPMnarxNOcDfM4JItd5bkqNhQSs1F9iXInOZVLdjwlxvsvkI/Nh6hXGUxu5kejx40ya+j6/vg7nuk7G"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaK2pZd0ZLMVNsbTBHZmxU\nYjA3dFVROTBaeTNIRXBueEkzZGpBam5TeHprCmwreHlsQXlQUDkwbXJma2UwVWJ1\nR0VUYTgvR0VmeEN2UVVYaVhLTFI2NFkKLS0tIFQzTEVIQkRaaGFwenl0eGE3d3J3\nRmhoSldtOTUyc1F6djU3eXl6ZmVZcEEK8FgdL72SKheXN1Qymz6v+QqYGc3W1JHX\nDjSNA2R3KQVqQfYsEXpYTku23MyzA22TfY4h6Kgka0gc6VslzBQQ+g==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpeXhPRXd5d0lKbmZObk1S\nWXI5SmpFbEprSWJIUzk0SEZJdjcyYTZaZldBCnZaMTVmUi9iQlN5c2V4QzFTNkY4\nOCtBZjJ4eGh4OGpwOTFBdVdXWkt1NTQKLS0tIHRON2JrVXRqQnN2QTl6OXNiSysz\nZTMvRFZDczlqVnJmeDJuWHAwUFloeTAKitnlU2K/oH/eWAadLnRa/T4z7X5Nw+zR\nGt/hUR1y9JIvdLZF5eTqPOocko6yrk67O4u0GdcGB64xPfLXVE2aNQ==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:18Z",
"mac": "ENC[AES256_GCM,data:i+akhcMUB68eFv5AH8wb/bOa/vHC2N2OluQ/+vJ2QUyuNBZ19hvY8d7iIRxj/KElL3vXBBIs9+OOZJUarGw6lVSRd/CRyeR8XmRtRiMm1nsLKh8uzL6KMjQwOYFrlZH1mv9KFMIlQpAniOcFQTWMJrQpccz27+aQO1JWDi9askE=,iv:kuNGWhGbRUaCScH6yJM40JC0atWXelkVoqn8gwLt4eE=,tag:rv1EjluoiKeVkHsE0ICffw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink