viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/xray/terraform.tfstate.enc

1016 lines
150 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:lw==,iv:qNvQE60v7xGGS34hp5pgbqvyVCTrTCsdNCSsx4rcguE=,tag:0x/3fUeQWWDbP3lrPk5YPg==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:IQEVwxw=,iv:8PcbovCfz2cZdVCG/izE8oLKFGtw97aEGvN66REbXvQ=,tag:m+ej9yUFD0TVrnz/+T9kDQ==,type:str]",
"serial": "ENC[AES256_GCM,data:tg==,iv:sKvNJtcIquYbCViSB1osdNJD81ICBek2otIbCv0Sy3s=,tag:SCx9qqUwKDbIGba1aTEVQw==,type:float]",
"lineage": "ENC[AES256_GCM,data:SHmzDc4ayuP8eBJ2kgHrIpSa+ker2WyS3tjM9kECwfEEG2Dj,iv:VBbsiFQNRSi3BtPviKcqHYF/8+0v054cW2seIqZOPVw=,tag:IUmoKFfI+9N9kbyiOc1kUg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:31jkDQ==,iv:T/+r2ENL89YA8szxQlxcYPZNamSt91JcfZFjO9d5WNk=,tag:6mPPBpYHQAU47oob8bPohg==,type:str]",
"type": "ENC[AES256_GCM,data:Mu3P/e3z2LjKDnPrThI753T2,iv:xSyGQrmWWik6U9EMVrmy6wO/Mwh4ydmmrSR4Mkw1mFw=,tag:nBEuKLmMfcIYkqY9a0NAzQ==,type:str]",
"name": "ENC[AES256_GCM,data:u7MB/+4rOA==,iv:YHi7uJq9itSCPOraDVhw3jWG6BJtvYzFUfg4mBtMeXM=,tag:bvTBHPRy7LpMgUy35p1QaA==,type:str]",
"provider": "ENC[AES256_GCM,data:0Qy69XHYehYsWj9fBdZUfnp/J9GnggYphw7lTsQQ1YqDBGJiSY/jpKZEOlJsPq1Qsw==,iv:jmrR+HcFNm3N5ZVacc7hE+QlODHXioez7m3PuQ/bNSo=,tag:fiVlDtV8xQVF8MnT9vVyAA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:BA==,iv:LO6t9MhRmY0afLt2/KQDCZt0ESfrUW+O9i79R/ksK4M=,tag:QN7EeD3UBPUETS/Ne394Og==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"created_time": "ENC[AES256_GCM,data:+TdOfm2Pi4Go7YZcU+Ab4lgiZ7dCrxMwuLmZFyH0,iv:ygtg3o8LMBXDIDr0QvsFugVjXZ3ZxXSeIkAKJcFZ1fQ=,tag:bQtFSY3XO2yfgJq9GCiuoQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"custom_metadata": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"alertmanager_account_password": "ENC[AES256_GCM,data:yqqw/fyVw7ulXchI4Q8QAhqc9hI=,iv:Qlja3ynV8gAbkMzV80+zaiCOLe7ytulR1Z6twmWT+1g=,tag:SfIIIfqAhlmf+PWhy2hpug==,type:str]",
"alertmanager_slack_api_url": "ENC[AES256_GCM,data:lSACaCpEBCmtsQX0B4OmZWbhJV+KqDuOCTLu9QHCAWEncAex/LDmKkVeQd2Bp1K2u5uzhTOQ1xsUwZNqw8ma5qroG690kkxRcFVNOAAjZ1K1,iv:Sw5w+Gcy5OSbv8PiKf3oYNVENFqn413eg3CyzvPqIuU=,tag:2ELaGpbKsDyLGiFwi2tGBQ==,type:str]",
"auth_fallback_htpasswd": "ENC[AES256_GCM,data:1w3NUDpY8ynB8mc+/JHEafNOQELUdKYnOD+GvCBUN31X8/R8oxFVHIQffeZYrUeZgtT3Gmidwv1bK71sm9Gl6WWh,iv:ylCpKdSAkgvFd4maxQ2mJkL4WidH8z9+BRFUU2OM0dQ=,tag:1HdfBy6qrvHvC5JlkXGgGQ==,type:str]",
"authentik_postgres_password": "ENC[AES256_GCM,data:wOJRtGW76AbrVumsLytlow==,iv:yohis/WmVZZRLj4UQi65kjgRMIOi6V3KZue8R/cyDE8=,tag:hYdAmQ0t2RfrUXbiKlOq8w==,type:str]",
"authentik_secret_key": "ENC[AES256_GCM,data:5WpxuBjejfBaiKE3Y9/QbS64UH10JXNe//Y1fo3qJ6+AgNLDcUZ//kOYxiYsFwHaIy3r,iv:4YBL6ZX5ChKK9q7kIFtc6OE3MxSRnQNdSY030uYkG+E=,tag:5bRukzT/d2XUXaiwEc7COQ==,type:str]",
"cloudflare_api_key": "ENC[AES256_GCM,data:2KpKAXE/JdaTxtV+jP/1/xCS3sJnKLxamRGe3WP0W5+Ds9qy+g==,iv:DdfGiHjtzQMS6JBbGAsPSwkacEdCdojdIKIOMUrhaFg=,tag:0JdZyfOdte8PYp1dYZOMEQ==,type:str]",
"cloudflare_tunnel_token": "ENC[AES256_GCM,data:PXCTYgfyZFs+wZtZIiNPgTx6+A99bwLsP1k9Asp1YQ/HafpGnPcAE+lv180ZNLr1k9HBLjwG7ZyivPZ7jQUB8NiRsIV34oUrs7VtK9vq0abhA7eEpjUdlcCGcEDCMMlT98YS7TmyHjuag6xExgLLug1zPS6lsnqmjKXf6aC8T4EtxU77xnxziJtSj0bJ9ovREBnkbFRfE2ZM5upzp17suahY/wQYfH+cS89D8E5QwqqS0CwMcQKM7A==,iv:FJF0zHiNc8vg5BAKODpZlLZlCjn4jWkgIsPjDLmn9AE=,tag:rBhh7DoXtPMOiyjv0Qp7fA==,type:str]",
"crowdsec_dash_api_key": "ENC[AES256_GCM,data:E8eOmIprkjgYT+0nBlRgq9p1Pb83NfiLzU7dakCFZRmzPObtQVtc+n1opA==,iv:gpqucQg6bbs7Agmm46QFCuQOd9VPzVLVwlGKfmUHn7Q=,tag:sZeGCzclaZftbTN5tvkC3w==,type:str]",
"crowdsec_dash_machine_id": "ENC[AES256_GCM,data:9lfZjF8JJEcAUb5H/c8asvBg0QayhV1I8E1uiv8=,iv:PjHJjPKI1U5Lxm85UiuV1tlQmhsH90zWJpf1w9IrP9I=,tag:NxszBwvJpENPNOFICN5JYA==,type:str]",
"crowdsec_dash_machine_password": "ENC[AES256_GCM,data:M0K9tyhAy/zNtsBbsrMQB7oG8WwKA1/SYa2cKaoLM4l6auZrFtWYLCLp8Q+cHZFoEhY1e1JyKfsIbj7RIviDuw==,iv:89HgrjwNto3MrVWtn9OZWKjbjwN0TOBn5BN4vKFXsWM=,tag:RFswxuDMyeLbIL98zKQEiA==,type:str]",
"crowdsec_db_password": "ENC[AES256_GCM,data:VAfdBjBOx1omn1kG3gw=,iv:L1JTpE+mkY5gE2OfexYA3VFrsUDMm/LkHjDC3dcVey4=,tag:NN+i4j891zDA0/oCUC4z/g==,type:str]",
"crowdsec_enroll_key": "ENC[AES256_GCM,data:BR8RpwBrmYFxUcaZmHUa5xqmEuKaQuSOHg==,iv:fQJqPokCsueDkQJdjheX4EW5LACu/ACuF72qgyA3fZE=,tag:0W+jQoUGi+7MYwfzqArezA==,type:str]",
"dbaas_pgadmin_password": "ENC[AES256_GCM,data:D7Y3RFlRqlMG1Gy+3nilWsv8bhj6ZTRFkQGwDpacYo4=,iv:iB0fg5St0P7tQvMX1yPQH+Qyho7+pyJjzCNX38qjX4s=,tag:KayiVEiFZ6DxGzewQACmcg==,type:str]",
"dbaas_postgresql_root_password": "ENC[AES256_GCM,data:NqN5HiNNu8TqoYUSgrkIKPKR+k+4mOffQDQ=,iv:fraltZp5wMw+0TiUjwZerbKHIb7BGKQYpmeY58Zf8Ms=,tag:fvSHBiMXgZuM0zt37ussbQ==,type:str]",
"dbaas_root_password": "ENC[AES256_GCM,data:0j8gBJbYG4OwMl3pHDNovgV0WsEGiZp/1B1tAQ==,iv:nxAiL+FxX9FzzZ9rIWb/av6F6rZsMdnttVqiNKtH39Y=,tag:RK0lRvPxKK1gEM9PjtHj8g==,type:str]",
"grafana_admin_password": "ENC[AES256_GCM,data:Y4J5GULha/56RY/ISpDyxYzfNtk=,iv:ndGo4DYX7cFl8H55XQGJSxYFCS6Gvmw610v8yanMvqg=,tag:S5oiVC0yj0iba5nxOoWtWQ==,type:str]",
"grafana_db_password": "ENC[AES256_GCM,data:j4SJcitmU6ZGLIDB/OeJ0/MPdYoS,iv:xkB0w8YEg/mWMkDrLIRbAdg064D1ZCFSuRQi+gNvhWc=,tag:cVEhm333IoTjr7/DhKMZfg==,type:str]",
"haos_api_token": "ENC[AES256_GCM,data:/jI5us7mlQ3Ia7T9PU2JIIvl84B42noI6Mbk+juI1nBTSXWMn1yRgyRAXWapOqJ49HAS5YauRCozeCZ2kWmJn8ADqc1gWJzKMrqiSjAV20JauH8c/hC3rf4STBdbV7JDV/tPASB2cwPyeWIgKnONZkHVgT8v6EckwgHZTzk5q9wfyPvkIYSRsZZJp3grimHftsrZ4ym78XYEtO2A4AHj/1xC0AXQrYcJZijrVtorPMaMwBZ4Xwqm,iv:jtd3Fvww/QXedmPIxSDSr3lrxx6RzZngWsd9C0wQveM=,tag:vAc5XyXzwSTveCBFtwmysw==,type:str]",
"headscale_acl": "ENC[AES256_GCM,data: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
"headscale_config": "ENC[AES256_GCM,data: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
"homepage_credentials": "ENC[AES256_GCM,data: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,iv:KefUcy85eDLUhakZ/5dHHXSVKQpKlE3pT7cA7CQuqKg=,tag:scP+6yRg20deNIwGqpEgwg==,type:str]",
"ingress_crowdsec_api_key": "ENC[AES256_GCM,data:suRIXCDLRA86P9PcrHI/rAnVL32W6uBl5iIE4YleSoxy/yQPqDpUtZJwKA==,iv:63j7/UANJdXC4LZIBwtD9mip9UjwueEWIU1+aMMjiYY=,tag:NkFOWeuh+0CCAcDD/untaA==,type:str]",
"k8s_users": "ENC[AES256_GCM,data:sDKjU9aDIi+ym2nVj6IfCqWT9A64+iq1VSFF72qX737dqq7yN75Gl7PA10kLU2tof9fYtCwSDlM/MwFNnKA7HbFniTOudMmzunUjj4JtZFkbj3xSbftAknfaVudJ0KLpu1FZbmjeRvubMbyx9Ja6u9FWzT8Qt4zEoJtlVHd7myvbn3CBVz4MgooEQOCoZS7+kNhggOyNqa+gWSNQQwL+kAAY1KZmmJyjyJ4auck=,iv:I4TTvyshw3+muzbUWKr4wMFrNyS1ha3E/USyRAUZIOo=,tag:1SSy3Obo0Rv90VnNW26jlQ==,type:str]",
"mailserver_accounts": "ENC[AES256_GCM,data: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,iv:jjigvW93J6wk5iL/wExZHq5uIWqjIxaUnwkejFosFYY=,tag:biuaXg0H9Pgk5F0iZTaa3Q==,type:str]",
"mailserver_aliases": "ENC[AES256_GCM,data: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,iv:8xgW/OJ0mvnQ+TK/5X+g3EO4V4jDGxcR8ywY/2RJI3E=,tag:Lkjj8jMyFUEPk3osLRjc3g==,type:str]",
"mailserver_opendkim_key": "ENC[AES256_GCM,data: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,iv:JAYqbmZ4ousX5IwRCoxY5Lc2nr2gylKXUfio/4fZThY=,tag:u2vXT8K/PcyjmXf9oIj1Ug==,type:str]",
"mailserver_roundcubemail_db_password": "ENC[AES256_GCM,data:3pdQi+2seEawb6chCiM=,iv:v8YebElfJarJ7WgNwUTP5M0jnyYICIQ55ev51IDGhz0=,tag:5J5l38DjeMCbNsfHd0IluA==,type:str]",
"mailserver_sasl_passwd": "ENC[AES256_GCM,data:uSJDiE7a88QKYA9v7NriBnGdYD0oraUOFjphBT5I8JdA0GwmV3Arm0HJWpMbO5X6REkvkHf+Dut9/IupZEYx0PGBZjrjppgg1MgUWlYoACn4RbYx95u8BDu4rgNjKRD/p0kc,iv:nyW55X8sxxxBEL8t5MsxPoPEnQ3xq7pmfOMdSyabDbg=,tag:zyioCbaGB2a4DjfuE1gblQ==,type:str]",
"monitoring_idrac_password": "ENC[AES256_GCM,data:Rt4Z+NLF,iv:v5ce/fPIiKyR6D5q9pOTU9m3xZXWu6WHVCboSBfXqX0=,tag:laNeRpnY1W5tQioaggc0uA==,type:str]",
"pve_password": "ENC[AES256_GCM,data:6bEyWNRCFeKh7Kh6nDhSuRii8Y3QtSot+WDJHg==,iv:8wrCiG5BNXjDHe4kTbOsNL314ssOaUA/r9pPEqxmz7I=,tag:+10xdB18g4kTn/5RbK9Qag==,type:str]",
"technitium_db_password": "ENC[AES256_GCM,data:ZRivgkYW6BaUsLytnNQ=,iv:n/6jTt2nhuS0C4aY4Ex7+lkCwcCIibVE30mTYFdtCa8=,tag:pYckfRVCdisaNpFHfs/BKg==,type:str]",
"technitium_password": "ENC[AES256_GCM,data:VNlSoHCsieIAicqQwm9xWEf2HxmYCko=,iv:6PeCySCHcL9YoYKFXCssA6wkyY9u5+APIaKKUjNaIbU=,tag:7IaELlFMH/YsmYw8J/nnQg==,type:str]",
"technitium_username": "ENC[AES256_GCM,data:+mou53A=,iv:nhgQrrh7CO9U1JgcqrCLviBQXByjLyPBxuxZZOy4t80=,tag:ysG0cgwheIcyTvRB+TuD3Q==,type:str]",
"tiny_tuya_service_secret": "ENC[AES256_GCM,data:lkZoPK+E0QAM76SIyPnEMnibEM3DPg==,iv:YkgjjFAaFSEzd3U7WszRBmVsYbQajRtY+r2aSr7lWCI=,tag:RZiYe7sJt1ZgcJ6r/JvuuA==,type:str]",
"truenas_api_key": "ENC[AES256_GCM,data:yHBYiulCtaUgzY8HA5YapCWDQk5kgVluTvw31psaKjPW2UNcCL/N9ujcD+A9U1fIkcyfxmx3WQmZ0KvgwjiyeIXD,iv:SCMFrykwnJ2NraNMAQz/TpGo1Gx7g8it65Au0+W5Ipw=,tag:jEyHnC/TqB6x1dPrOToKZA==,type:str]",
"truenas_ssh_private_key": "ENC[AES256_GCM,data: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,iv:J41k/5+RO49hqvKsQ9NcX+RLFJJHgu6ROL1nYMOy99o=,tag:Vm/R3PesH/vy+qGy1jNRXg==,type:str]",
"vaultwarden_smtp_password": "ENC[AES256_GCM,data:UDd0rhUMF3k2nMeEODGEofFUtlU=,iv:rosRzSn5/dCkLess005PQ1nihI9Nmi28jy9PxQbl+0A=,tag:3hBeXyWeA4OoaxiHWeilfA==,type:str]",
"webhook_handler_git_token": "ENC[AES256_GCM,data:kT2PZFJnv+UGD1k5jSUvyz019EJ3WnPeK+Hc9rndG8QExUoNOwXjkA==,iv:IYXVnfhjnHXBsYKlVzzCnGgFgUuTGNXPhfv7M15AgCo=,tag:VTk27+y1iEUB9vbByf1ONA==,type:str]",
"webhook_handler_git_user": "ENC[AES256_GCM,data:P6ZZx/w/UJLFrr1g,iv:NtQN6bhPW4pDIXjGwWQAup6Cfrb+/TagqGMyDCdezxI=,tag:vEu0gEceXNyQ1pYg8NB0lQ==,type:str]",
"wireguard_firewall_sh": "ENC[AES256_GCM,data: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,iv:jg3eAs+l1MIrz/5fCd2MYyIaKYivIuomWLL/aBa0WiI=,tag:uDWXCgTZ0KVBJ2QUl89kkA==,type:str]",
"wireguard_wg_0_conf": "ENC[AES256_GCM,data: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,iv:U/I26auhyr4qZoHDoi2DQsUxvJYi+HJe1gNpXaZC+j8=,tag:Xm1XtKf1Z4WO0PvLUuuZ3w==,type:str]",
"wireguard_wg_0_key": "ENC[AES256_GCM,data:mwYe8cepaI3tZfR9lLbGp8DH/xq+P3KC1QjgVKY57BgneSAYPI2XqugEHHI=,iv:9W9CxApKX5yG1olya8tzPuTPw53DtqNVYryE5P65TDI=,tag:kCiIXxhWQ+3kWyH6oT5q8A==,type:str]",
"xray_reality_clients": "ENC[AES256_GCM,data:/aVad+F2KvseevMLqJYANsHuR7CfOkZ7PmPMMov06udUymo26St1dkietC6c2Nk=,iv:7h5eNhzrYrX1F4Hd9A0LyzM5P/ZGQCUfbeInQe2TKJk=,tag:10pdWUVDYZ5MQbEb5daCkQ==,type:str]",
"xray_reality_private_key": "ENC[AES256_GCM,data:s0k6taGpIciYE5daNXxuUwiw0zHZSOOaWw9TY2iOQQuxyjY99L6J6dbE7A==,iv:OF8F2D1pTQ1t3LKuHZR2FqMp5dtHcBaVXCH/J+4k1uo=,tag:4RgfkaqBBKJuEU+e19wMOA==,type:str]",
"xray_reality_short_ids": "ENC[AES256_GCM,data:jGaUfJF50TpizLTXEeZFpaC8v6COqhXqYd9L09gJl325vGjqmDnoehMQ0qY6K7YsYqDjVqzrUIKUsoyI+FfrKQU=,iv:9wSXwZqCEaVZb+LZFa2RcOJmO9i5XF7seE5gdXxhRjk=,tag:XFZjHU6prRQanhWuZcsulQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"data_json": "ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"deletion_time": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"destroyed": "ENC[AES256_GCM,data:kRTRuM4=,iv:y4oz1R19jLQJWTRD4kmyoOYVKXk50hk4LwG5CSEs31Y=,tag:t+ylU8kwEIg9y+uyDLKvqg==,type:bool]",
"id": "ENC[AES256_GCM,data:QEwnZ+TGRVH2BM6hb/J7XXJiRwU=,iv:KPkutXFHtlZjf1r7Mg8Rc/ihCSq6YrQPGApe+WgYiMM=,tag:3CGBp9LN6R+vxgGeBjdmow==,type:str]",
"mount": "ENC[AES256_GCM,data:TZzNHX2W,iv:wWJShoJ7y1SQqu59RxKZr4oxk4lYRARta1rW69gucdU=,tag:r27ruANnXh2IhU+3nLNk7Q==,type:str]",
"name": "ENC[AES256_GCM,data:Y6bWAymyzlw=,iv:LLGh43LzuSYBNs2xNb71moAk9vgC/x+zQSaMub7gWdE=,tag:B9kMeRIWxJVlPickHkNvOg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"namespace": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:Uhn4xvfw1yqZ93opl+fOSS1sjKs=,iv:DUH5rpGXDQeIlEaBW2TIQOCPFQ0Nq6xmWrkGJxgaXmQ=,tag:6qFomF7rxE1Hc7g1Wce+iw==,type:str]",
"version": "ENC[AES256_GCM,data:1A==,iv:cj2GMqFezcJUuAElo/Q5EmnFeVxxwI7lG5uqnTFNO98=,tag:oyYqaJv5kqW7Aj3wHJ2n6w==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Namtf19/wLlRBx8=,iv:kZUqim7AfcdT8yBhD6jzzhM4+LOapTsFaGoyofyfA54=,tag:bayfqZLFD/txH/eR6s05qA==,type:str]",
"mode": "ENC[AES256_GCM,data:y7nrgpeBOQ==,iv:tKX8Py61c4/Y8SogZDmBLnidrDI1+vXF4cFgKZyq6ro=,tag:5BlQrP9sjq8keZB3EKmcGw==,type:str]",
"type": "ENC[AES256_GCM,data:xXCOiMZUcAUT1thZBRzGSeo00ik3,iv:FC7Fj6NPjRTsXbMyzlyyYnnp26Cbp0GN8Jjwj/ACRHY=,tag:r8xZQtFsSiI/GR7QIGQ7rQ==,type:str]",
"name": "ENC[AES256_GCM,data:4aIMyV4sJ0N+xj4=,iv:kKt1ONIviWfgLffx9Uv/dihKvwy0ZEZKUaOHpzpHHTU=,tag:dW4aeK0ZlGl8Le7F+WqQJw==,type:str]",
"provider": "ENC[AES256_GCM,data:MuGw6+5komBakhWj7yLRvU4X0lg8s9wXVo8cFCKGEmNYBplC1cQ/hvOhxTpumktAwRhOpnG1,iv:UtZvHwlZfNV+4u4hzxEDVi+oKNRoG0wxJVW9r6VXLUc=,tag:r+sddwep+kYalY57rtUwWw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:/g==,iv:/SNHaI+OqeizeSquXN39DnkRwQbKBx20fl3jLNZ/6S0=,tag:rqfLka/k51jFPo1qPYf2BQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": {},
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"config.json": "ENC[AES256_GCM,data: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,iv:7kvBCSeja91jsVxsxwfbdioXJtHHoB3l/pS43se4JTo=,tag:VvWyep0S3f7kAD/FiRn6AQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:McpE4eLvNiHbQd0guafb/g==,iv:jZGzCd8IuAmtEGWSNZ6CmlKOV2YIn073Uz+k31tMLNU=,tag:2pBcKHI43Pz3u2zIPGU8Zw==,type:str]",
"immutable": "ENC[AES256_GCM,data:16L5jTk=,iv:WZiA+LggFmUHKUyyU2r7nVo3xvW+vRJ/gnl2IWcCERE=,tag:5FmdI0OwwJp5yUfN20iZtw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/match": "ENC[AES256_GCM,data:wlBUuw==,iv:xk4nRCJLvZKMaT3kmrjb3NFcYEIER9FK+ROx6WvUdLU=,tag:NMuD9k98SasNkVHG3Y6vQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:pw==,iv:xsoJ16CR8hh3uGSOcCowrgLpIdCP01K+AlwAntUNw8Q=,tag:7w9uaOMow86MCbqRNSDtig==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:+N6r+Q==,iv:RwZVuQc7pWMpjbK7r/riCdipXLYkwOatFV15zHUMWu0=,tag:BomHZ3Y9KYXDSapzMDDT4Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:TptDarY4S0T9sjM=,iv:KUdkiIlniJOWVS7Y9pvlbg2d8hjUjGFdCmSDUqfoPxM=,tag:E2Ibcw7izOZaZD1SZ4iNbg==,type:str]",
"namespace": "ENC[AES256_GCM,data:9CVFag==,iv:iUvO52U3A1u3KlfBvA6pefha01FImR/ozLauKSA1uZo=,tag:jEfIqpGrrZLFHhWG1/e8lw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:pt6Gh2Dzjj2/,iv:Y0zGVv/fZex3SFtI03Cc5cFaumyrmL5WqdrF+yko91I=,tag:Mr9rQiBVR+5v7YECOkY0vA==,type:str]",
"uid": "ENC[AES256_GCM,data:OxP7nUNiR/c1I2sc+nKQkIL9B68kefOiSulmSafjVqySBosK,iv:EwvYp2qk4IrxNwEdp5h34Ao807sr0FMz7Vl4AyVlfoE=,tag:ej1/xvvCr4HJWqjnKFUXug==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:iwnXZXZxXNU=,iv:mG7iwINju5N+DeRhVNEgrGQ6fSeXLFUUiMpovoN97x8=,tag:lr+KnDxP642iROr4KAdrFQ==,type:str]",
"value": "ENC[AES256_GCM,data:CgeUFw==,iv:qbDoNF3a8KmxrCBYcfM9Vzv+BfqjgjAKCaumeaCDALg=,tag:CcNqEhWC0KEoTTkSY7+uMA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:WQUY34Y=,iv:2C/YQnfaxEpgGlq9US4O4rjgVhhUrLCiIgKNzs9XDLs=,tag:OYNg/6WDA6BgVqImqpiUZg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:HqqYAjlGFqkDmuQ=,iv:7r/1epgJrv+8UneRVuq+Z+IGGZa+MHIjKWvZR+OY1cM=,tag:b+GwAYGyDWYELWL/Zv73tw==,type:str]",
"type": "ENC[AES256_GCM,data:Z5FZnzRb,iv:z+xzVrCzSxVQdPZw14q69lPKp+dO4i64dSKsS/acRAo=,tag:49aQT/4IL1zPDXby5miBPQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:5jqM8GKgS/E=,iv:JAHdnBSKvFyvRPd08ZIJHPCjJELTTveEGmEjHhSjAYI=,tag:C2JKNRANFbUGnwTbb4jfNQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:vroxadCzI8H/Pa8szF9G8WHZ6rcaygeo5dZb8o5+UQ==,iv:g7vZa0lQ+oY9X1Jh77f6slxMjIMRNxQIM6W3NI/VxPM=,tag:mZ1pQGvaTslVvHZ3/84JiQ==,type:str]",
"ENC[AES256_GCM,data:lSTRbxwPM9UcuQD4vYqKV7C0f/ADHunIB6r3AVePqe6jMMYPXA==,iv:Pxa58cOoENLFwb8A99tfEnnXhexEgpIE72enPyn47lw=,tag:u0zANUfHy/tVPVbckMhY9Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:S751edhL+1Oe3+M=,iv:KTQo2ZBMQZ73jJ0GTEw8EDrVgj3A9Sg+yqFM9MQ5hsY=,tag:0YCUYPP9ZV21qqJNmnzt6w==,type:str]",
"mode": "ENC[AES256_GCM,data:dxkM95Naqg==,iv:RrmGPUZEWsyUoy1ZG4a4sxO6EtiAuPuCK5MM/iyCuOs=,tag:lx1Se3FvaKjt0MkCESzuGQ==,type:str]",
"type": "ENC[AES256_GCM,data:2MysVN51iRdtEkvODeJuvZpPLZkw,iv:TBLPLNqg1tzpvPVkMC7xxwgb5T/QY6sLNUXv008LL0s=,tag:AO0w5ZnvM/Ib2labzjZS3A==,type:str]",
"name": "ENC[AES256_GCM,data:5QUTXA==,iv:xv2nkxVCGMzLUsN11Z+7jv3Y9CygiKK+bs+5RqRsX5E=,tag:tNctukXyE3/c7cexGrXJYQ==,type:str]",
"provider": "ENC[AES256_GCM,data:6exFT+76u/X/T3FifR2Wjaht94ADdIb3XQ56JxHvLKLiMmdxjx1vO23ty23KpVHYg8xXH5XZ,iv:H1CUp4NkiyVtPBw2TPN6x3nnb5oj0VXWsoBN12THcf0=,tag:y2eDbz9Queezxi4b2ex8+A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Tg==,iv:hVKXpxsquig5GjwYg7NfJ2SAwAexIZsMIbd+MkH1A/c=,tag:RPuAboitf78rIQXr3cEE6Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:oONHKgpeza6I,iv:lAJ1G0cS/9xX9dXSVJZr1hiTG1pl/6Io3GZO4RedTBI=,tag:JrCE9ZuozHcx5PVNPt1Chw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/search": "ENC[AES256_GCM,data:hBy4xw==,iv:HelgrJ7Jz7/ZQm3UX/yGDvfJq21kfnweSWvmXbh32jU=,tag:o5u8UQuRheoQlXSLd3u0CQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:xJ0=,iv:z7YTdoLmP677blZXBeqEQp/CFteJYvGmYXXgybIg1KM=,tag:8jajMU3aIWu9TsTziPy8WQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:UTbaXA==,iv:ZafojFhYfAecIXx/XrK/h7Jtpf6fB7GU+eABmIxBV3I=,tag:nU5fnCZ29bhKOXAETQSwoA==,type:str]",
"tier": "ENC[AES256_GCM,data:A6TYBovo,iv:44XxDfcCh32N/3cbyhirpzbRpblIyZ/lLLyORRPnNM0=,tag:fgEPwPhloR4qwrDV21UzZg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:BPlQ4g==,iv:Tg5+9eSRabPLkUEyoGcO3OyJEVcNvEsjkZu2fkvEQL4=,tag:K29PbWB4FKitOog52hfE2w==,type:str]",
"namespace": "ENC[AES256_GCM,data:fbyeZA==,iv:GNs6UPDES73MtGeHIaAgTavwt3nTJvx6wvQHZW8o9e4=,tag:2rJJHXP9trHD4jssgdDCaQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:SWtO2V3YHHVQ,iv:+3bRv2Wpab0oDCzv9O+pP2BH2DzAqU16xsmfRat3tnE=,tag:AFbIAqBtTheK0JlQstTzlg==,type:str]",
"uid": "ENC[AES256_GCM,data:IOuQCmnVduM6oM3rpX+FRjH2cEA5GYNiSxhrpJ9bHtAiooG9,iv:TM1py9ylO1OeSUQx9jtpPp8xBKHcMwHBdWdH74VaC8Y=,tag:qapQY59/p0jcje6Lkf+xGQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:kw==,iv:EdaP+u9pDtvpBqMaotpnR6RTD5FNBAsfljDt/JKzKys=,tag:EBCH6btqyDc6B5iqi0AvoA==,type:float]",
"paused": "ENC[AES256_GCM,data:LkH2kZU=,iv:VjBg1BIrdOYLacoJFQgJqSFD3cxHy7KIgELUXzDvcKU=,tag:WfgFwn97Yiaga0PXTEL0EA==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:B02x,iv:EOiim8+P9FSPGO6lx/JLUe55ImDoEZCzwvs2DxcHi+8=,tag:6a6N52sbUOVh39VA4kX/og==,type:float]",
"replicas": "ENC[AES256_GCM,data:2g==,iv:X/dsj6t3WZEzMSS1JzHBtFtlcRuJLVJGXYXwq3NZLwQ=,tag:tjcOU/XVRNrdqWtNSUIoSA==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:fnA=,iv:McPWb4fB4eg02p6w/GNsraMxj3fFSij/W63rarqsnSo=,tag:qspR5Yow5iOa5Uq5Gc286A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:vM32Aw==,iv:ZnMWKoxc0J5fuYdHxxnTQ7J391E2O0TehHl14g5YCYU=,tag:0I5U9L0c4CeoMK5L7EY5Yw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:RA==,iv:7sN8y8OEuobtQflSkPdMTFrLl5udFxrhDNX3kUdrulw=,tag:30BkPaI7stZ6+Te3tlxKmQ==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:+g==,iv:f/SY3T6zYnZRN86UY87trVdnfHJiuDLl4VuY6+wXy/k=,tag:wsDcdkGlngJ+XrkOTBkbEQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:zO+vLouRTilo7WOXOA==,iv:sfxWfB0A/wNKXukcX1Wq9SYHOLz+cTv54hAOYm5W+XY=,tag:Sz2Pk6nP0LIpkjyUXOdO7g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:dw==,iv:lg542L0n+FKX3acWNUrezDMvpKkSEYkETVKPBb9PVoo=,tag:iff2xBTxQ0UiXUfZrPjgcQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:PYxhyg==,iv:EVtoWKkuPVdGqSvUF6ZqJuj6pbiTXNkXrZfb5zYeeU8=,tag:oCfNnX4dzsljxR8vIZi+4g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:mw==,iv:oOb9NHbVA2bFCZXalWbN6pvL6msw/CNbW6A4pbPfOnI=,tag:tl0DYYJt4BOCrQeWlJ311A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:myWsjw==,iv:f0d/j3Kw0aKb2eXr66L5blMbTRUjpNWfQ7T59qPLfMg=,tag:yZ6tKYdkfAxaQ1RAv/wLeA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [],
"env": [],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:EYrj/LJQC4vm144e/g==,iv:Vryv6RVXA6EYKhJpGWl4AoZWRHDBF3MbyTNr8bcglSw=,tag:8Hk8GDMZ1hr8uEmmEER37w==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:v/pFumwrYaEWE0vM,iv:aT78n2antw/FoCJHw9Nur0cYY7xo5WMeQTIqd3REJNk=,tag:/7ctQGEmtzYEtHg/oYjRyg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Gs3zFQ==,iv:LryGS659R0BOX1N610BcMU0w5RdDmWFbhrRcjEJDUKg=,tag:8rxvURVlAZJHtcd30mvuhg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:dKC8Yw==,iv:bEBOwszDbpGeCB5SvFjeKfV19NuxHMEH+vqRIvlt7js=,tag:pplJe7HmHJhmU2lCVAcdiQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:zg==,iv:sZyiorouPcRwW78f1VS4dA2MPJp2BDajLz6alCY4fmQ=,tag:n8PDXRM9Qf9kcKAWTcRkww==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:ks3C,iv:OMZLKCkLSoK0r4WDsnAisfExbAFohyEWU42CxsxMe08=,tag:fe53a63S2zj4km6TNsKPWw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:Os+zeg==,iv:9m0th2IVeBPzu5efP6zU+YkT03pl+JvnfnH370PKtG0=,tag:nK7bqgESiDjavaTKLkqVlA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:rw==,iv:xp9Cx33isNkvGuSuuDhn6KJct0rYS7n83ZDgRtDnFWc=,tag:1/GpLuSf0JJVxClDiwO11w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:+v6O,iv:FSP848Xe0cadOo2dgF3P5SgR/ZTAcP6xH9TCqmDwth4=,tag:qCogKn1BXFf27ecHJkH/TQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:MUqNjg==,iv:iCXazQGjNdSctZd21mojQor1aLwnSxlEfNpt+LqCXNs=,tag:dHvRAwRLZQG/4J2k4JN75w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:rg==,iv:jxNONxCIVSgknjHw/xcsC1cl38/h28IPHHHJqtKIOwA=,tag:lnOKqkxkfH4ywyobxUxvKg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:uhrY,iv:vj3aYX/LZGphDynlhjGaRO2iKTv2E5BKdQge6kLMaYE=,tag:ZP2rnZC7rczgCXoNEMUhDg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:nhoChA==,iv:1Cu0PPl2ngt7BIeb10yGpZxeaNCc0S3epijWqbxaRKU=,tag:cLgBHgbTnKcuKDjowO1Ruw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:ew==,iv:+P5yEyodDN03SSIagLxdkj1i6vTJaeqHf61GlcbUsBk=,tag:rimRyZMFRNKwXr/uCCtkUw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:p6jy,iv:1QCYvZDEBMSbP3YNLtRm0QkqoMy5OPA8dgjAk23xv5A=,tag:6UJqcIOoCfreB4RnRkSVgA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:fUh9IA==,iv:4ubQS0shhLN/tpWM/8H4AM2oeFwzjKxjqQFAVSHCpiA=,tag:P2R1tEZZmMsBPNUdm6FeTA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:C4Kp,iv:jofRkIouyUhgx6RLutKOXZNpFzLFz1v+t66T7m30mMY=,tag:deRqPmoWXzxWNhflr8yKXA==,type:str]",
"memory": "ENC[AES256_GCM,data:UGQ18g==,iv:4gcy8M+6FJ295AKPGbLEuyY6mXWlVQPqdJLDhs9B86M=,tag:mZMtcUTsnGPAtzPsj4/Mhw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:U9RdPok=,iv:/WsGIu2X1vjpZhJ/6yOvYnBJRP1vdWkzHbbNphm/DC8=,tag:F0UxU6087LX218n9yDHMBg==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:UfY4/9Y=,iv:wNzRMVckG6OzwCrZXVZkbFZhdOmJOugPzIqFPvnqUq0=,tag:aO64XIBvWpflqaYngRTdvQ==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:M+EQHH/Ul2ezs0ClSJ5JzOzxkTE=,iv:sjoOCxjnuHj+lL7bEjiMiJFKeYTE8+nqYzayUXZkDP0=,tag:raKtCyAzAG8p+SczxVuPkw==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:iH4Jtg==,iv:vAGFxK2D2ocHqeBS3BTkVObENyo7rgWqFTbcdFszKk4=,tag:W8D43eU2Uc0ZgLd9fWpp+Q==,type:str]",
"tty": "ENC[AES256_GCM,data:X2Xuke0=,iv:C3zc+JBSwb61nxGDZGccoUgeKUUm46V6V7IIQbUBO4U=,tag:IxHBW2DwXW/Ot+f8zznb4A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:vt6U/QR8FZ8UbahjropgUgo=,iv:4xqrIUxczZbI6SEygyLaL5TRFlnLogwNKGv+m4rAZ4U=,tag:oc7Qgwxo2Koh2GZ9R6JBTQ==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:NjFlUA==,iv:hv5KyO2pBqD2ZDHPRwuPJVto9JbJrZknCN0mFtrE5qQ=,tag:qGLt+DG7EP0OEbCEeqJRvQ==,type:str]",
"name": "ENC[AES256_GCM,data:iAX9,iv:YW0a1qH5m7IsmNvYvHKVBySOvGDBAuk1yD3K9K72blY=,tag:9zcl8gRgdxWWgahchUCpWg==,type:str]",
"read_only": "ENC[AES256_GCM,data:mpQtrJQ=,iv:+lMpBxRAxu+7OM7QHVxZkQ31yf/KyyWf/Zx155xidaE=,tag:JMPD7IzMUtkAKJzDDLnszg==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:IGbgnA7Bag==,iv:bAxmXLtuaf2DDn3qaSlGB5deuktcqfBFIc6h+lMGduQ=,tag:v/5qSrA6sBkGUZLUoF0aOg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:IGj9NR5SSfPHVdMf4Iajc8M=,iv:vahOt+M/pvIYj6p4U4pBXM8GLx+qyifLthDpqryJn7E=,tag:XQZhoY/z+/Hzn83Y5WME7Q==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:B+N4bQ==,iv:JQTu4oQkFbzwoJDgiQabe5puyzPF4x6DRHLahmd6tPY=,tag:b5v+n6lX+16NRv2HzsESlQ==,type:str]",
"name": "ENC[AES256_GCM,data:Z5ZC,iv:QABBx7EuL9ckfgu2avHEY1fQDMbwpY2Yq/ub7NF+2fM=,tag:DrcvqOxRa0kRjytSUdQW+g==,type:str]",
"read_only": "ENC[AES256_GCM,data:6RDUdPQ=,iv:VRpntUJYCpBec/i46kNTphK9ZXPN+vxdklXsJwP8wPo=,tag:hFcAtMMSR235vr0Xz4BYxA==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:qAHyiW+A7Q==,iv:e+O1hInYWRemKVeD8UmgxMOhpGZDHCOnLYYK+g+/oNU=,tag:0st9QXQlOeYtpF2dqG6EdQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:bXKs+OXvtov6PBGAnSBsDzKVazn6,iv:UjYJ2qd7HnEWX+9vPhBKIUuB1e+5mvuTZE0BYoys7u0=,tag:wLyfu/Hf96Lz56kASDEfuw==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:P3DZdA==,iv:RcZYKi/Jag79z6sGy5pfL7Wn/qpfbHXVnJtYBTSQM08=,tag:PKAMsj2aDDLb8u1Snt3fVQ==,type:str]",
"name": "ENC[AES256_GCM,data:0lS95nDU,iv:P0+qOfZdHAMj0KrRlRGu+HX8QyuGcClM6t7kI867s8I=,tag:9DdrwXqJmZ74FAce3Dtx4w==,type:str]",
"read_only": "ENC[AES256_GCM,data:rjEaGrg=,iv:YeT9S/UY7roNNnG3pF3MQbhRvpg86ZDGpPMSwzvhR8A=,tag:7pBhgDDtprRdiFv3Lz5hdA==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:hDEqRT1ni49nrN0=,iv:vEGRkGzAS08+LxRo8OMsWMdlu9TBgqigGI8g/x5ngCg=,tag:cKbf1ADYQsxWMzzd9IrRtw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
}
],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:PaC2cTk=,iv:hQzzhAZf/u86a8iC6Jc7YpA8NCLwQgTo19YAvtQVyuQ=,tag:XkY0tHV8WCR49cmfRQL1qQ==,type:str]",
"value": "ENC[AES256_GCM,data:UQ==,iv:2k6RaQHxI0diA2MHYnoC+cI/a/Ik/063156Bjc3Divc=,tag:hmVf6HTuQ4J6QbBx8BSYAw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:XJVy4Apf5qCgbjcP,iv:ek/O3ZLPs+4jJGh9PkaU5Q5Bt4uKaCauAuGFyXnUhdA=,tag:9D5vplHwSmYp2Vo9bb87cA==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:ZYq5+w==,iv:P1T0jHmwR14TrAIdngKmb1ZKXuwjzS1vjxAAZiAXOaU=,tag:FydMBQJNNZDuoSSLU05e3w==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:z5LLz+E=,iv:dMh4HwRc8uDOdUmrpgifFL6eKe224Vkshh0adhAOjbI=,tag:z+WKiJTcA5brFja+nAFp6w==,type:bool]",
"host_network": "ENC[AES256_GCM,data:guOQcJ8=,iv:iqUQl6o0dzCQqjtwWNwDbpo7LPIq1Mk7EJwHYXh9zxw=,tag:uGsjFVmog9eIeAAsc5XJew==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:N3aI6Qc=,iv:7QX1TZlC0mqt5Tv8T2S8bMccGxE7OaxsA34Vi9p48Ww=,tag:OdYFOjph8P/lQmM6SdCqaQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:G9j3cCJg,iv:PpTfxFUKd0UdBb9/sJAScRy9ephVKBVdcdzYTiTKb2M=,tag:BYxEJa6m6PoGF983AFbKGw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:XP0G5Z/yFed+VIza5Gg2Z9Y=,iv:4qcVykbDrCx0n97fjYGJbzux/QQrQ6dTyKOO12QWR0g=,tag:Bp+HwXVv2KXd76+C06T+jw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:pp/MXJU=,iv:17IrHcPILQYiOV6pppKRNcPzrR9P0t8dZTx7RtdwF5o=,tag:3LaTGH/0C5wSic3Xfl8bYQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:X1k=,iv:nlXUBwX+fklF7we8iiUon9bVVI8RAYjai6o/cXg8p+4=,tag:1FfqAzebKeerPoQ8aB8JzA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:1Ydy,iv:w2gRuvvxzDWDbgPAtAEOO0y7Vu1u9A4A3KptxnQPBH4=,tag:VzYVpJPAZYHra0jeEtAEXQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:D/imrg==,iv:oIrgEelGqVd3jEJGr09OtZj5PqpRXdHBNCp7uCt7f2k=,tag:YReDpUajeXT70xdPux06Ew==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"optional": "ENC[AES256_GCM,data:GAyljR4=,iv:erhtVd5w5t4MM/jgcdpW0LEK7YQrBAIDewvZW3jxWj4=,tag:JUJFws8P2P8ebJe20ESkFg==,type:bool]",
"secret_name": "ENC[AES256_GCM,data:tpRY0rfPwOUxxA==,iv:ODT8yVblmEdC/KD15Z+uVmZxC1AtIhMGsYl5I1PPNfQ=,tag:UuqyBFj+oP9KbQlhBzCWAw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"vsphere_volume": []
},
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:pdGWhA==,iv:QWvW1DxquCerDahyKf2gQ49BJBKYgsJVHX6zXbDLYs8=,tag:NgI0xbGHR54/secmIU1xwg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:MXssKHVoe76LJgE=,iv:BLrrneMEkj9fjbekTnS0yqcy2jvs0cnG6A1UlLQ4HpU=,tag:otLNUOEcZAFefstslffS0Q==,type:str]",
"optional": "ENC[AES256_GCM,data:uTC3rGs=,iv:kZfu+FkMuvnc+0j5I8EMKruOOApYgJ3KrYKTc80+K+8=,tag:JNFI8mBg2YiCXw84giXJFQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:aRyVZKZi,iv:rFXeMnLw9py3SzrHARGnOAE2GaZw6NxIllYHdGEGDB8=,tag:6iOyQi+HEWn05iVvkZWcMw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [],
"vsphere_volume": []
}
]
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:YA4YYw==,iv:v+H8BzUXCzx1HnZ8M93WDXJYFqdytreRRRW/wB66s70=,tag:UBlxy4zqsVpf9lnD+wcKjw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:hjY0v/2FutClomp/MaBoJp3uqsHshdxH6JRi99zOcELmtOB4RKG8VL/ORIriTudj/Mu+K4UEg9rR8PFZ0Ym/t/iJihCljZiOwvjW3cbHH7z9prbIk70SeGZ0CNlu+EYIbZQO6JT4OiQJQ9LjRzYNhnBfRdJ2DQUGvwsL2AyJd9TY4XGUqvdAH12/TusQAdvhs9uWMktWNVrHVNMYZYZEtd4PBTjVNuCMMC95qw==,iv:1pfxFwdTugtBXYt8T1c6UjA2gWKCeUh9Kx3b8AIPz9k=,tag:pOqKvIkrpZGoLdV8WnWWGw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:k07Ru3/L+bL7ELpgsxbUzyR6fyOKKB8PUIsUarmHAs1ERavuiA==,iv:GrWrILdBlNhjD5xj+l8jjuG2uE+ReSLOzvQozMYN9KI=,tag:VBZAdgCF2CGg9LeC6oCQiw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:B5g1aXOrp4Qr0QY=,iv:x2HuwxBlPF/w00MtOF36siY1Eq/tvIdok+osLCKcdpw=,tag:Vjqk91RZjX0pudk2cw1xgA==,type:str]",
"mode": "ENC[AES256_GCM,data:XKPP5SHIbA==,iv:UvdRFjOKTq16s0F32JbtqA1bntLGZWlw54RkhpefKg4=,tag:+iYTGM3QgWBYTSwRBc05HA==,type:str]",
"type": "ENC[AES256_GCM,data:a0vPqJ9xGvC/pf6vvjyWj+oii8c=,iv:aLhPZ3kVpmgF9IBASL1q8ur09UeduOo3R22mFY4gqhY=,tag:aUCV+DcmrKKJTNpPL34Pow==,type:str]",
"name": "ENC[AES256_GCM,data:+qk0Lg==,iv:yXO19t00thmQJcdmOX9yJfO2hev22/Zj92HHG3JPyts=,tag:Cx//RLENnaQv4xNunRr2lw==,type:str]",
"provider": "ENC[AES256_GCM,data:+TFL+9Qbe1dJNAhcBg58ZhNF4Ti4xAuj6QaMXfBoYTpZ+mejLUjBeKS6n811Wo0GZJ5tOPj7,iv:c7UIn5wWaSobMSiVJwpXaJKygopYEdwZjQ5z6VLIqAE=,tag:PBsGA1G9A2LJ8Oh8WA+byw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:2g==,iv:QKHeXPst3WoizrDmXlOUZNuxjSMMI7muvsh55RemopU=,tag:VQHbtpgDsPq0rfvIet6PXA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:55isMw==,iv:Th3zSVoTJrzzwdQ/tImihw9s+LKtfW7gQijqivPVnNI=,tag:Pkz0a0HDEx4P3INaIaUgAA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:fA==,iv:qDOP4+jwgVQ9omEjS3OUzsMMaLSTbh+SNLn7onlvazM=,tag:NVa76+lBvAqmPrjzowM0Gg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tier": "ENC[AES256_GCM,data:7hfvPVtm,iv:Q+X43so3bm9AZLVewLbnU/EdKV9eUhHgH0WcElSzrAM=,tag:zs7jOjFPhpqSsb0ArXQOSw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:L61vMw==,iv:VfLCoWAi7xoKealKOB9jATfW1L5JNF+83/7K67tacdc=,tag:zTCdlLTGJ94i7unKnE7MNw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:SaI1HnMEpF1H,iv:w23eP7J3SAP5lhTU20ENSg6weH1ytwTcxEX6uqrM624=,tag:VqESlMUNNvEcdasRok55Dg==,type:str]",
"uid": "ENC[AES256_GCM,data:Fasm6gnn/b9tmq+GAyr3s+83dfix8KiDcQiX1Lr2UsemFwzX,iv:wBonfpXF7hHdn5rY9D9qBLZYJdRcvP1jVKMluI6z6j4=,tag:PDvQRx5qqQQW/LoUEUtinA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:aA4/AHo=,iv:DUi2kx++M+LahW5zOew+rKUcSK4oL4K9yIrkaStDPvw=,tag:KEcUgOeSn7w1tv/uj69ycQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:kO3dgXV0QWlnshbbWvSx7S2e8iTLf6CX9cH0xgprYaNxt7IwhawQGHI+EvkZNOJU7xeekPPND7KqE2Vf2xE0VizrOMdOUCBcYmObLtfBtg3L9dK8uHoiyA==,iv:6ECOuswbCk1opmGBAbn+K7mg5hT6ME7nX0VLk41oGw0=,tag:5mtWP5ureRFcls+NIxMmKA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:COU/KTiTENQTAic=,iv:QJoH2dq/QNEotPdo2HbPdj3XF3qzGo9ECgraqEIKFtE=,tag:E3P1O+336Qxbr1ff1KOyeg==,type:str]",
"mode": "ENC[AES256_GCM,data:csWFeJ+L4Q==,iv:0lDZFRAdCJLs0FE9LlZwbfBPtJYWREfk9VcTR73OPRY=,tag:XUUUOpQDvhFL1tSoZxnyHA==,type:str]",
"type": "ENC[AES256_GCM,data:soPq+/+M4yJFEuPbt40O25KS,iv:pgc0fdqfUnHCE8YfYjkPlIN88LJAe1tsb+V+cZ7kfH4=,tag:5VYKjBbpcRXZ7nDNefXOUw==,type:str]",
"name": "ENC[AES256_GCM,data:fj1dYw==,iv:sCaH7YY3GCtCBj476AkaSBqKMGcAXtoVCGDk5rSEhFY=,tag:yqdcLmj6wMMzpJhAfTrLaQ==,type:str]",
"provider": "ENC[AES256_GCM,data:X0784hx94i7JHpDbjkMvOiqhfLRwuHmW7LbLPx3e0IOCATXDcaBAc0AsCXdOmueQyggVcuDZ,iv:9cfmaYdh5pJIi3OvpXEj/1XC47+32BnGUrKAn7Ek/zM=,tag:81alYnzyUZCpjyO2HcF/1Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Vg==,iv:loAHiJRB/Kl0B+2f58wPXVze/ZvTlIlghiaPNRWlhB0=,tag:ww/8yKd1bBAWR67HuoHw4g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:m+slcSHLW5Y2,iv:KYEaW0z59JM0PdQEf9AzvOH4/DTJpblVSqIj+P4RdwM=,tag:XFT9IRBplIoAAWCe4bUNNA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:KQ==,iv:sunTuvEuBATqFXjGG5Sk2/WGsAonrLJO9HVFg2yIgnw=,tag:9usifVa/BR9JOJkwPmgYLw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:as/7BQ==,iv:7r1Z1psrLXfJbAfnq6sQ00vmDjJtJnblhd75jUq0jDQ=,tag:CPv1uDRw1lpwu7AqdHfcGw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:yq7BKg==,iv:S/Y6RsPuSe3fCHbIzClEcDaJFpcK3BuFxcv/hP/9Y8Q=,tag:bwEIBIa+XUpKjxgWNxFDaw==,type:str]",
"namespace": "ENC[AES256_GCM,data:vBtPpQ==,iv:tBnrUVqTTuWz8/FvIqlJpX8MSPh66wDO3dGq9DC34ng=,tag:nfiVuYeZQ6yfZy24Rkj88g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:mPx8nXIU+tkp,iv:hGY1YRAPcKYuZDPWba5NyjWHQ3EIdYEnH/bcEFtaBDQ=,tag:V2MlxgEVJ0V251fgiXydFA==,type:str]",
"uid": "ENC[AES256_GCM,data:KQ0V07Yowu+nqerIaZE7jAbqGLIk6Z2spTmUv1Kej/J+8bMS,iv:v1SxSgI0MpzVGe3BapWxYxEnXk9N3aPdIrwBYk8LNM4=,tag:R+2tLSbJE229m9UTekAPdA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:Fc1nYw==,iv:zl0PjjldwuCDDkjIKNPhzOx6eNyf/jzsCIkjJea126Q=,tag:DDXnNZ4HwLs2/8KjR4pQ5w==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:4JcV1+UhdnthWO9RYBQ=,iv:27rXnj5JiT70fd9IcjyL2voT/2Ix0wFWALnda/Jq4vc=,tag:W4j/js3r60OrdGh17rsOFw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:6omTz5AV2BTU1SkZQ6Q=,iv:mXbBTxlRNXF2AnILMtKWTNtef3t0uBk9knOp2d5F3HE=,tag:habiWsH02GELJwjtuFtauA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:KA==,iv:ouizLmZt23d/ZXgzcz46hLKiamWmsv6qT+QVUqEbQy0=,tag:Xeojsa86H7/O1YQ1dOZQgQ==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:gwIOKPlhVQ==,iv:qHpHPemZMDcl99oRnodQrAbqcMqXZ2RJeTWSulnJ+lg=,tag:vlrFDSkIpvf5rVGwlXs5Kg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:0ZWQgA==,iv:4PvRbXSWm4wZuRa8fIUSfGXZCDF9aqpGYaPwtm5lcP4=,tag:bxvjyvwqtJfHAXchZQ5fUg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:X/kPXMzYtD4h61Q=,iv:Z0siznuWqU+71i67lLZSPySL2eB9/lfYXAE+eR3AB0Y=,tag:SBbKZNPkdg5l2Zg1VoowXA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:FIAnnDM=,iv:1GW4+s4FovJjetyKmtuRD/f0eTdpO5omEY4gVjXI66c=,tag:JWI78jBgEZOuLvAJXrEkHA==,type:str]",
"node_port": "ENC[AES256_GCM,data:Iw==,iv:Y3pMTsJzfu3tiHlBVA3LhuuN9z7cTbi+Bm5WqBoDg4o=,tag:B8JTbqMs7H32nLp+HPvDwg==,type:float]",
"port": "ENC[AES256_GCM,data:LKbWhg==,iv:KN6AXQjTgKqAgmVygR/IKrsbXX6Nuo56wE94uDgiKDU=,tag:vou643RJlceEi+GcC7yReQ==,type:float]",
"protocol": "ENC[AES256_GCM,data:m9iq,iv:W7A00QjSbA3r/C9I34Nw9QC1tXFfy3OYksDTcEkzDHQ=,tag:iJqv4l+AttiT9rKwpxNd7Q==,type:str]",
"target_port": "ENC[AES256_GCM,data:UVEJSQ==,iv:CJPrZME8/gf4XmU9Kupuv58YnJw7Sb4YHHG3scF6wHc=,tag:uhAZemm7mUhVlCXfIPlMjw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ON6x90CyPkXx,iv:cW54+Kp8osLVLuDIckuy8NvRjrb+XCaCdPYdgzEqMW8=,tag:pk50tlWuUZXH5oOJKAvmcg==,type:str]",
"node_port": "ENC[AES256_GCM,data:Qg==,iv:xJppufUFgGp/cpx2FS8W4i/fwOJpWBgoAQH2Mp+/Ywk=,tag:QIWUkT9MwwkEy6VcENL76g==,type:float]",
"port": "ENC[AES256_GCM,data:5CRa9Q==,iv:vMQMaBKnk0u2afkmTNnnbViiBrEfMghgl3gwpMVEvq8=,tag:8POecpADBZN5fDm1+rD8bg==,type:float]",
"protocol": "ENC[AES256_GCM,data:YPK5,iv:fdUprfnXY0+f0PJCnGqfbNr1oCWjEC8/uOzk4+9tLXc=,tag:S7qUBsu1DkhUP+ckj5kAJQ==,type:str]",
"target_port": "ENC[AES256_GCM,data:KxGZRQ==,iv:G03C+BA1PbJDE6eyPGbj6mFHhhNmsSQjsmRSfng0hG8=,tag:QMtdhLGc73yiKJ+OfdIhvw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:yYM4Uw==,iv:ygIkhmHGyXNbZvfiKnMJ0K+KN5Iqtt5DQ8qNWgsup70=,tag:9ATTDYpgMtVvL42ioKYbWA==,type:str]",
"node_port": "ENC[AES256_GCM,data:Gg==,iv:GuWPjA7jvt2RY7WJ5Bx91JfdLR7Y36rdeV5sN5plJvk=,tag:beahKtTPCSdOjyh2II+0Qw==,type:float]",
"port": "ENC[AES256_GCM,data:c6RtIA==,iv:mJ3f1jVJAyJ/F8pAtGjR/MFtbvUqChmEHsOign5uZzc=,tag:0piz5jyRklkGx7p6XSBR3w==,type:float]",
"protocol": "ENC[AES256_GCM,data:ZmwO,iv:VIcgD7eMMThcjKBDVXvyJGkY/ESKQA4aGw0vQ6zr/1I=,tag:NxNxtQnRHwdXRy4MJzENNw==,type:str]",
"target_port": "ENC[AES256_GCM,data:5m8xdw==,iv:6B5LNg5wKpOSXp5uHbemoMglk9ZhJAuYPwefuZEvU3c=,tag:LFzsN4BAscSzt4zGG2sWWQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:K/NFUoY=,iv:yCvWOmwg8nExA/3WNJMAoOiO9ZqlnMlo5DYA7nYYvRs=,tag:MxHKTxuj6hCuMAxnXeNmuA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:BaaFFQ==,iv:jOjUd6REalYGTSKvSs8BA02/3mI2tJ00L+nxYSW4/cc=,tag:QqWV5b1tpHlaQQe3w/4qdA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:LIQchw==,iv:uLLknJXdJ7xFhj3aCNoJtVcvGHOJNorjdvO91YPfTLE=,tag:rgVtWXQ0TdO5+0KfEPLdbA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:vhJB2eHSR+UZ,iv:jON6wyph3omDTE7bRf/6Y2DEB2DggtpPkTUIeCu1gG8=,tag:Pl5b4tXDGnVvFz3RVJSoDw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:4EhaZg==,iv:pfcHdNhsfQ8K/Xb47ZFuWxculz4zqPsFu5r99wR4Ibc=,tag:7G7PFpGIl+BlNiBsrM4hsA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:tiwF+mkRlRgVby7c4e+esjHdnAspQK16bx9+sPzADxsgsyG8+LzOKdOsqMEzZH1uz+/apf4y/JP/XprBGoyNjQ3l0E5R2U0KY65nEPZ4/uEYkft+id1/1Apzi3+dt+OoZ/JCRMWPjikHl5Y6GEpBYlYuEzY=,iv:k0yrVO6JVlB728AgvcILRpKw1/hvaTocGKvhO0d4L9Q=,tag:+RuECwZX4BZ8n505XYI6pQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Bq+tPC34qodoMAhsp3o7RHEwfg+SZ6r96D8UJeReswF53MecrQ==,iv:GjBuhKMRLIJAGW2HCbvr5qJl1LqK5EA2Ny5N0Rc9ci8=,tag:a86xkSv6OmhrDQLf4p2cug==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Lou6XBuE/PJPo5o=,iv:IISymPw1iSpxgwsYgnYBdg0cluVm8C0hM3EfZF+J17I=,tag:RfTy3StI2ZrZAjI6/LC3TQ==,type:str]",
"mode": "ENC[AES256_GCM,data:WSGiCjiO4w==,iv:JtrKhLMl9AnDtx8cezGQnkGwxulhx4p4JrrCY55Sea4=,tag:7UjHXcOWIX/rEdIaF/Zqhg==,type:str]",
"type": "ENC[AES256_GCM,data:P+a6t3ZkoEglIlsP1uYLeHzH,iv:IKdrSOxZ3H0fRY4+oI1JPMz01vLHlGjo216XeFHr44o=,tag:ew6EmZ5Byih6PS93PC4fdA==,type:str]",
"name": "ENC[AES256_GCM,data:I+zYQq4IXzsOzugh,iv:K3mEA18v4+iuy+WOeVCSr1uUH5zJMcI3pQ0RZU3X5hI=,tag:/PkKyoVzk7qLEkJFS0aJDg==,type:str]",
"provider": "ENC[AES256_GCM,data:9GosdQ5e5B8blumQEwzIvD5kPnLxIWPIAuFnsFJZOlZ75c+niFN7RLl3GLyz/ayYUHJq17m7,iv:CJLJe7qXVDQa48bf6z3u4ghaUJvVv+tWYdmJc58kzow=,tag:2G9q1nBLZWXRwrKuLO0AMA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:ig==,iv:OJqNqBOR4JlbiVtxfDlMDt+VDG+YSN/oWQWbI5dqUss=,tag:tHNef17EhXvqHecV+uNxiw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:IlxFfP4/G5zfa8lQgDxCPzo=,iv:U1MUGEqrWVZ6W9kxS4/COYM9PqSqpq1fa8qp2R05Sh4=,tag:18oz8scXFOdE9wFbGKqbWA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Xg==,iv:cV7IkvqvZUjziDC+9gX7CcoJJrowMkBlJ6tTvFTc7JU=,tag:3xuljLz5OD2hUEv4ZjozZg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:4PnWjQ==,iv:saf8cfPhtVWISH9mt2Bcu66x9ilRVf0FMb7q4i4tyTc=,tag:dVsaxaOtc/wPyG9tZZXiTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Y8Bj5UdwS8bALWMt,iv:kog3MpXZ1uL/QFNog4tpOey95rdd7kq+pLmJDHa7mDE=,tag:ZJ6AHDqblfSl26RGHzGauQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:FzGfHg==,iv:abqT3aYD9p6yS8pPDosZLZb0vCvr8sirMVNOOti+2yc=,tag:k3Gj3JNAJJH9QJuMuMafng==,type:str]",
"resource_version": "ENC[AES256_GCM,data:/ehEap9m6ZNW,iv:4A7rVGq0yMCJLC3Fkn9vCIFMBLcHJZtCiZB8v9+nLWI=,tag:TTTIw2ebDFffsGDtMNpcSA==,type:str]",
"uid": "ENC[AES256_GCM,data:8VrzEnN0utdoeWIjltSHUOTIzEnqDUSGzIlFV+O6jx2aTKFy,iv:PCK3QEyLqJcopAFH/csYJxov6t+frSK38utmOevdVXA=,tag:Ku8sOFZCOj9TgcD8MyvGfA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:3CDrlg==,iv:byy8mTsu1YnhKEPUFOaS6A4p++rSsrqCZoi906/kZoU=,tag:feRm3hGOwwus/nMwLDWfhw==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:S/Ults1FHIWbiNt5,iv:pZ/DWXbCSZ1Tonj+oWPSW7oRzM9KRPfgu/FB6M4YLtI=,tag:04MWv6eU9qFN0OnGXX0New==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:DbcpQGfMFIcSWJyf,iv:v3uFrlzLqE0fT/UKpp0iAr6u2Q3Q/YzeCw6h3tFCBH8=,tag:GTsmTlq8MC9Y0MQhlITUGg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"external_traffic_policy": "ENC[AES256_GCM,data:2nq63Q3arg==,iv:JItFMjpISK/62k+SPL4lWlzCbArKp36jBp6RHU27p/o=,tag:gV6RZJ3wIiYmtEAfD3+2XA==,type:str]",
"health_check_node_port": "ENC[AES256_GCM,data:PQ==,iv:48fUNAMolyyuBf6t5DGYQiNXej3YmNUacLh58liJBqY=,tag:bwOFYJAf7SHBfEcfAfWUNg==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:VD8XzXwscg==,iv:fUQONSMJEJ7zrkBaBhJM5cat8mRwyIAE5RQUDMrBZDc=,tag:bTRUSgt07vTc63l74a1CWg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:vQJbgQ==,iv:k7TXPoOYgXmGM6bDxi92//SYDMeIxhhwq7J2fwERq48=,tag:JszTshrSQzla8tjzPU8EhQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:PHx1PKGgGg92yPU=,iv:OZhfE8py6SIBR337W5asHUPsk6l6OKt9q5nPI4njYdg=,tag:HFx7GP/lmoYgmPAFcvFLUw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:tIee0v0PBw==,iv:gzbi9dTxxK0WXFfCHvoVUt1mQXXTjufXHhONE6P6J60=,tag:/TkjSltD2de44BoepQ73JQ==,type:str]",
"node_port": "ENC[AES256_GCM,data:c1VtUWM=,iv:w+g1QZbrQqkMtrQf6516FFdwPBhjXmEPgZqpyzbBvs8=,tag:fVy75Br8xOjrHMAGE1EyOw==,type:float]",
"port": "ENC[AES256_GCM,data:YbG9AA==,iv:Kx/PxgEgjXLGgUW0xalukTgdfQDPED/Eu8N4oJp5V5U=,tag:h64kVSRbjGbp5sYMkWqwzw==,type:float]",
"protocol": "ENC[AES256_GCM,data:mvGp,iv:p+ymXT8++7vs41KDGRsEaIhwdCbDvPeRZVM0nwbjJLU=,tag:Cy/bptKXbUIKapShSLluVA==,type:str]",
"target_port": "ENC[AES256_GCM,data:lzTTqg==,iv:v6jqlgQjMNg2oWSNnVnkzIp6PCH8kiY0uhatEX0iqCE=,tag:X1SZRZb0Y7RZQ2fa422WdQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:A/I+pxM=,iv:0RykO9freR8Z8sy2KKN6ER5xU/vV/jEpKlwvlNYgxjo=,tag:VGpnJ2KUwXpJDaUsi+i56Q==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:DeQSJA==,iv:qSJJK5sYh2zwv51TZsVALbvsQ6whuSKcI90FzNTuRX4=,tag:a+BIDie2itUHc6KTWpsJUA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:Ok4hEg==,iv:OUU6OyXOoyPevHe/fBOBinY02FBAsgEkJj2rifNnd7w=,tag:NLDwti4LirB4CgQDTUkl3A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:ygInJudOvKq0iyDd,iv:63hd2mg3LJCKRo12FQuyrhKl7zThG+YitBd7eYafOSI=,tag:kgn2yOvkMNpR0jbo6ObGYQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:H7jxC67aYUoIO2c=,iv:XlJY1ATqXQg2imm2LWvmecbMnH4Szv0BvFXO+7gXcN8=,tag:f75jic2XfVNEZqsTEn/5Ag==,type:str]",
"ip_mode": "ENC[AES256_GCM,data:hHLH,iv:uom3AWP3Ji1Kj9V+c377OMjPb5DpJEskiGk9NGntH5o=,tag:kmNKrTRznulSSsrO3Ciebg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:RBB+LA==,iv:As0P1luyc/Tx3k/PuXc6CXILbJKW5XUtmcUJeRtPd4w=,tag:oclmtDMvWEFTzQc+mI/wOA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:tOXMZujJv+WRRXRrXJu3SzbDmeDk6oO/8LWBp/ixr61QMEee5k+VX18qPgwmioJJ5ycel8kl3E/2zE8P0gdxczQOlqE3pbCnBKLfATbAoZwdLULhrcAOCoPFakxAk5+1EwU6wO9Ffps9jWwAIOxn8xdP7ms=,iv:pYaxbJcWDfD3Xtxumk2XDBmj5K+8BxWmRu5DlYIJN74=,tag:vxmLNxixDLvY7GI3HyK/BA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:vGi40rtqNueB7ApVOUQ+vrP4kVq67qsJ8hB777Q7ucBDPoJolg==,iv:m6w68n3KKdA0U5K+9lJ6SqJVtJiH2iX8cl56TxvZqIY=,tag:LkiTNWZaNH9Ll7111B5XRg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:FAq/9TNoqvLfDu5qdb/2HtcakUO5pFsIACnZVaWzNA==,iv:9hkh4VfEklX43/IB/QVUsXW2UDf+FdNQIHt8qhXYnQU=,tag:yhLyalbGXBTudoY4qH11bQ==,type:str]",
"mode": "ENC[AES256_GCM,data:MEmAmxHkhg==,iv:ovgjUuLvQ8qE37CWfFHJtmOg0Iar6x0E6xOUxFwIy60=,tag:YMitR51L4iFHQWxE3p0t4A==,type:str]",
"type": "ENC[AES256_GCM,data:COBbBWDQjot0AIrSHRefaog9f5b7,iv:7KDtjuWgg4hEs1zhoBOIh55qlVRenctcSKZWaWpnK1U=,tag:CvL3ZcO4v+NtaUbuG5amwA==,type:str]",
"name": "ENC[AES256_GCM,data:B2jJi+y2gg+DlsTK6Tlh,iv:U+j4fR1mOOc89sHrSd/+Lpr5LVCpGr9HvxTvcDWBcoo=,tag:jjGYRPVpcOSzX3cMIJ5V2g==,type:str]",
"provider": "ENC[AES256_GCM,data:k7yvD5PEinJshvz0+3tuwspAE3vkn7eYXd9e4afNYXJviLPuuJbQ72g6Vu0mak6OYQSpraAj,iv:ueWLeVUSsb+Xhmag5OXZyGmSftpGbzY2rIcFuAv2gLY=,tag:cpbJhWHfb3c3VQeFL/md/w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:FQ==,iv:oe097f5X/b/kRQ/3Z6liKynHjU/jBR7pCEMqGUStLxU=,tag:GO8TRyZ0GL4sPMDuF0AAaQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:n9Y3Hj6NJ2FOxbykrYI=,iv:sdNufk47lIecKKNAUa3UQEdkRKInIuk0ONRjM2EtSGs=,tag:djBj0w6iF9FWzOC+BCFcNg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:bB2QGpM4Ha/F,iv:YbCL8EZ+Yo5uyFS93KeX8mfrrKMGfRcF5nXgDsb9DsE=,tag:TfD6v7iB3cioedUdp+LwWg==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:RS89Yx/5ccQibc339EztZ9Z+hu6ucFCBTtXGUOfxsCApPaFakv3EAGzaP8vfPh07x7I4mOzFT7PaTH3r9s5M6tdi4Tsj5qvmcQt0US/PsDEDmdRCIn5PD4X59g8WWxdl8K4yUfj7eIS7cYfZK48VwPfzhyqOixvdwI/+5tZ7sq8WH40t6mnvHTCOECnp4D5OdyeEtAYdIpufoPEgT+WPCZxD2X7bX0Ru8F6Uom7rA5lRbFsB3xnHq+zw+nWmM/qsukkyiUY/0fXbHTCqSFUGeHy5CXhbFZsHwrzeXblQVEaDNWPXo17wgNr/yUyO9QhLl3AMYetX9tJcZieIzBKuZ6CZ7w52edQ4PSZzVo5Pb6rWE/7HjJn8nWD/Vg==,iv:QzFWZq/M/L5KZsmlmMKBooxTJsv83OWq4c5WTPViUWc=,tag:35szhKF7f/jqQx63N3lmkQ==,type:str]",
"traefik.ingress.kubernetes.io/service.serversscheme": "ENC[AES256_GCM,data:mydr,iv:zzsJgcm1ilY4gn8MnrV0OXFqIV+uiXOXOGCVyNkp3uI=,tag:rfFfARl6iuWWXPNoGU6/gw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Vw==,iv:keR0SZhX7iEQzQe0+SnFjQAKYidmdctzjFZgeDni8As=,tag:Emi56F0t3uMvDt5LzIKGmQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:LDDJT55lXaQk,iv:2TMcbAQq2lY5TphcP1T0B6tiuz+608C4dM+ymwiQukY=,tag:Mme4SumwVcl0627+cAD9Jw==,type:str]",
"namespace": "ENC[AES256_GCM,data:ByKMWA==,iv:iyiFNj0qk8hAMbsDJV+WK9IfYWRuWfPxoAC2xra26ds=,tag:Zb4BT82yiO3xxcO36AzQUQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:+z4yLgii/+Or,iv:meGPQFaV1Zp3OLkrEZkSt4Q1kRjJFaj7Uob0MAMt4+0=,tag:9lok7fHldo/0FMqOVpE0XA==,type:str]",
"uid": "ENC[AES256_GCM,data:uoEkQqjiiOv8gZsLuo9vL1wDipikN0CoGFFTW7k8235n9m1z,iv:TQlCyOtYwoK9Z67o1YuSUCv3dZmBBdbQX2Xa3iLASrk=,tag:ynQZS1IO7ZlFfAKy0n/bpQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:oKgVMi84rQ==,iv:r3Cd+PwAXH+BQB8VEIO6BqTADvFonepi/1+7BIokYOM=,tag:B+uTnXtyTuWSZrElFBaPcQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:bc2YE1gnjvZ1EMtpyJB9DqTlMmQf9TD4Ew==,iv:PyrSENIGDJ6d+pLAE4PkyLi+Ac+yC7bQkp9qCV+WE8k=,tag:oIHT3Xre13xCor1Tu2AZ7Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:LdCi5A==,iv:sEA6eN5L4XD00bfLyHcmEqvysDUy5Qek/5NAMCQXhQc=,tag:/cgCpJCab12hLjN4WU7t3g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:4IqraQ==,iv:j1hbIw50DcF2IVYpyO9i/EtqdrqWpYXUUViSFD71ils=,tag:sHLpwVi300/2rMGUvZWPDA==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:R0mKY1hnrm/V,iv:exC8wOnESSWuVFbVyJi+VEktnwtGjKCiNZiHo+GLiVg=,tag:jiLIkVcwzPvf2sxdmduQdQ==,type:str]",
"path_type": "ENC[AES256_GCM,data:alGJOV8ndQwNlnXwyBjFtQn2EODA+Q==,iv:3hTI9qUyUAGmdLyNtvbccOFZC7NxkMpUinGlFiH/kI8=,tag:XVnuHA7nH3qPNfO4jt0LAg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:B58iFonEUBXhjoqI0KO+xUQd4zrCOGbPJw==,iv:QoJLPlrprMsUhx81fSm7bxRfQcPeCa+kcIU90FM7ElM=,tag:FSecM6LbjzDlOIi+nnX/lQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:McV0d3E+mNY9vw==,iv:hqt2hEXjDGzasUQTWjutbRxIc8jwdtVRlT4XUkd2U+4=,tag:NZ2nte5w9J6G2RwIT9cnWA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:Zm6SVfAd8w3bQaY=,iv:2gylHiD9egPqjbGlu8YOQDSYkJvI+3WPZCvgYvN6d4Q=,tag:V4lmiQ93uPuJdiuILQ5hVg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:5vaRAnEMvsCtfnTwiA4fKtIEtHY/rJ4h0qHZh3I4XS0yicUabQJikR8WcDCdiy+P61qo7+956wdoTBOiFToV67NIy4Bd8R/0Ky9Gn4/30z2/XPFl3JIzjL/7Ba3uIJbZeG45Ds9nUCQJ6wTYbPcMGH0ubLIE+4Ij,iv:BymZcf6pppBJB8Ys4lpnUhKDPoOcJON+XnSGzItvl94=,tag:eRwGTVuVat8AnHCnHONGag==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:KTauLorS+8KyHi95hxRYy4g6iGeqHboTjalPMUV9rXMYITMTfQ==,iv:MqiaWFl6tPxx0KjCb+/lsnRnevsfGjYOsu2uSzL9Gpg=,tag:vKy8XcC7gJZl9Bqgu0NQVg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:4Gz71J7kpikNAIBRFF1JPKNcgCVjAeWbdEq1RKsQKM4=,iv:MmpOSJyX3Xi9IcrRDv4beUbJSEIeBaXhsWVyt1mAEqU=,tag:k09yIaYM2qoca22ubtd/OQ==,type:str]",
"mode": "ENC[AES256_GCM,data:FTLyiklPzg==,iv:rFcPoiy6Yguzuhlk5W2LWTLYm+cZuvqTL4KcWFKa0EE=,tag:OpWv+WYP657N2h46dcWb+Q==,type:str]",
"type": "ENC[AES256_GCM,data:9SpqP6NjDV5yjpzGg7r+23ScnSNe,iv:L3Gn9N/2u0sHunKk30o24VtF44GlPgvkDSqb9d9Lvn8=,tag:05nI5pZWkK+rIMrYitmPsA==,type:str]",
"name": "ENC[AES256_GCM,data:tgX6uIRPsVajSig3gS45,iv:PAwe50C5mV/edXiRePzvvkzjfzQovVBk8sUPfO0mv8E=,tag:CJwVNKMiQmYIiDck5YWaBg==,type:str]",
"provider": "ENC[AES256_GCM,data:tRn1PCZaVG5wi8UBnhuXaRRVXx5d+WojOa8C/Kqyy/omNdZGtVLEHqbo3z89rl5UcdrONT6V,iv:BNQyRiU9DBhafUb/k7rs81zGyjNesitzseW69rYC28M=,tag:+Kuxm3e7oMfhxEfs0uDJ8A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:qw==,iv:u7YKwU5Xu9XZ5pOseewCmvgeKnd68w41XI3GIL8Nefs=,tag:bnLJysHv69vrXMNix5GP2g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:azVmq7BZ66goGxrMLWF1,iv:qSZ886CFF/I/0eWF/S8wZ+BmR2iw/PPoyV7nPNZZC2o=,tag:9DG4d0kAC1RaUaAX7nIOtg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:Uo8muyOIrP9U,iv:MF83o1xtXRWXJJQtt2dMAM6MYAf411Tby74Sr1Fz670=,tag:svG80edHynNapSfh2TkKOw==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:4cHBv109y/1NZpr6vDLgO5y3DzUJedQyA16LT6PXI9q5MlgLjYcF1LjUETSgKiF1YaAPew3c/8H404/NfBPetzv34xH2wUvDqfi9zFRLAJDF71d0Hov+ND9OFR5bOFrV0PFfL3MwSl1zes5RLfssELg9uiuE3U6aG3HwxMFCtUxC1GhWAlZ2EadbcHoZcKbbWx/ybh2hDozafA73NSSMOb58LQKjAQmw95tgftR9cesV25MOgCRtS9a2Ev4wuQT/3YbDnMXsl7a3feGIdo4r/pUB9eqegbHJLtcjU/wyKCoZwqzBN0ebfLEi3+Rt4AbNGwWGdEN4AcIPdYgTcD1GR1cM2pPZf6hL7az0Sxdi+7n/p/gH6uh/Qxq7sg==,iv:SnCTxXEbo3fEMoCyHov6+/aw5QUrr7DCmQLvo+fBCLg=,tag:6xV7Jk41iO3misI038zBmA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Ug==,iv:VAr0SjmQ7oagAm8ogaFawAwWgtqzkv7VtoatRfADMFQ=,tag:4RsEyjRZvNyU+XdCGa2/EQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Sz8skfX3+h4JpA==,iv:2yH9r29uF3vSBEhA2vwwb6OFZSYYWMYgWi6j6un0/YA=,tag:HJm8P+3LV+VXW6BjrADIqA==,type:str]",
"namespace": "ENC[AES256_GCM,data:pB2lQw==,iv:BGj+g+xjH/xkIG05luxA6Spv+vkHjUzUIRjB9m3GhlQ=,tag:1JywqJFLm+uWhjmLyfC7Xw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:yVXeMVqPyfg2,iv:X132pSKCcPlkygXFpfFLrQZHC4rMEbDgZdVtyaDTrZw=,tag:mCVe2vyjgP9FRaal0lOvag==,type:str]",
"uid": "ENC[AES256_GCM,data:lVNgBLaxxsCw4ueErIL8milovX9GIQ1PKzLTFUiQ8eMIeJW7,iv:yJ7huPyJvT+VIx0fs9pbKFa3fSofMjKgNvalTiOmbUY=,tag:ps71tfvVD5sHtZrhIvgYrw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:W14UsgLuhA==,iv:BTzJR8QmjjTU6mfpuv+LSf/yniDaODUyKUU938wShBM=,tag:jM5nfc7oOBS7ZuQ/4Y4fDA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:2EUFnDMUXj37lBdtPQ6OZvmxpAQrHTz+XRI=,iv:5gpiy5qpLr/HAh84IxwF0OH1Dovd0g1FbJ+ZnVdhnoU=,tag:BrCl6rGdZDIbFC7XZ32wyQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:lwzNgQ==,iv:xL5YfKV9Phna1ORy60AL283LxYaAa1Qhw9UoQuEkZL4=,tag:IrXdZ6jFhNYnlfHMlbw36Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:Du63Vw==,iv:AeqyAn4VclPhbA5uRZYUVENIKeI4IWBMa3edpgDjdoY=,tag:7ysVQ48IpQsLwr69CDkikQ==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:yA==,iv:xklxpTdLSTL5tycGPo2LJ2DxBnedse14AWeVpaSG6r8=,tag:U4yuYxphjRvYKLimKPzaBQ==,type:str]",
"path_type": "ENC[AES256_GCM,data:8fVojULiCRvgMBHgWlsXoEF1egCC/A==,iv:x0UeD5vP5oHp5OnkUlfHWrDoV0MsQS+fc4UnrldPW/E=,tag:Sd5DnFkNSkhThEXFuXrctw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:a5Va3ebg6WskT4EVz9+vMqHxArnJA1et2FM=,iv:icpcCmf/msnKjdJZF/fC+/yQ2v1By/8uuEV7C1eaRcg=,tag:S+Qkm8JYiS/jiWwZcdHSfg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:9F/LiPH8A0S0Ng==,iv:ZfeVvNr21INLNyFUuquB5nswEUULpQxMv6hgwVLoSW8=,tag:/h/VBJFK1u5n2b/dsUf3fA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:vezLZlwatE94eRk=,iv:DaOACRok1jQ0dIEKmI3+JNQifIpnAY/Q9vsrMwcLNpY=,tag:486ShiA6uCNQGxWf2IrbVQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:+N077ArJxyDeN67z1ec7s7Vh0SBvHVgjn1BgNwWSSuJO8ciIF9/AAIEIZzentjzhSLjv7fT47NUN3AaEIv3YdUBpC+xmiZiD2nd9XAVoRWgOzSf6AOs5QGz8ktV/3GfQHYBCkMNGkFiZoe2fJ1XAL9jFQwayNbli,iv:ME0J0Qy7f1/X5ZeeJ8zAtBPk49UsQPy2T6Az+AaAL3o=,tag:R17bekTi2NxDwCNi3XVuLA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:wHx+hax43LIUn8xv7kcTs3WTrJ3EGbdTBMzu0DCBtoYHfPvK6g==,iv:G36UpHoKti3ZWdVnJyI/6bK6sD9JEjWH9yXOPMoRhNI=,tag:+OLetwiD4WD/VNo47tZrDw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:rHvo8lxtFoujYKCScofOZLlc0I8xkE333TaVPLM=,iv:dOLGNnB6okc+9T+9yVF5jfpgadSTp0TUvgTiXGTqpWk=,tag:yRE0XM1+u+9tLuUUXWhNGg==,type:str]",
"mode": "ENC[AES256_GCM,data:hwL29Rzwwg==,iv:DLAIdFvQSYxf4eRjRRDgULvk/hchRHpVxAT0vbKHCnI=,tag:DdinbTFZvFEtwfQ20WK9Lw==,type:str]",
"type": "ENC[AES256_GCM,data:XeTQrpaNTN5h1FPgo0G3NOzX2APa,iv:5K0KE3CWSpL0O28NyDhHJk7T9C52TtFxCajB/4Oph+o=,tag:owOij2GduY3iBjawq89AHA==,type:str]",
"name": "ENC[AES256_GCM,data:jTXNTCF2MqS6hFKqLmTL,iv:vLa3mCo8l2ploBtPAAAKbYqbQurk524CSLAebjM34Fs=,tag:Jyv8Mjv2SEKtw1Z5iQWU8w==,type:str]",
"provider": "ENC[AES256_GCM,data:6/8v+2jzHVRH/1T1Y8y128x/P3tzAwJbPeFZN6yJbEveSXcz8poq2hSMlH25EExPv84UK2Ww,iv:G/fCqYw1LtE2IwbZ5W01xrykafvphHRg1m97+YhCYko=,tag:RCL1rU2UvCOPpJ7Zg/8nzg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:QQ==,iv:c2wVvPV67TACDGKHmb9oBlC2ZKVHg6/NU75uQgELxg8=,tag:ZUstqgKow1BS56K5DLz1Rg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:nrajdFdX9JJaNYy7,iv:Q24NrfOUVj+DwZJNJX4/OmEsAK2A4qG/FLFzhlTtBns=,tag:4adacVuARx1+hxyfWyWUnQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:IKajLk8HY9Jc,iv:jTw4IgGlQqViar9RzE1+z2XEMGjSnSYTEEcDnG993QI=,tag:bQE8iWFxqFF2XylYN98uMQ==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:1YUHcXv1LQw2VHd0BTD/rJAG0rSfODSFINbANdoBP5SjN4J99OEF5t6KCa1pTxKuNcCaqXDMWTSSFIC8y64n+mZX9TP9NV5jZjy4ghb5xNluwbtQBc3ewH8EqoJW2mYdaR8+K0qbj60b9oTTsXjRxK4wLsaN9PIVFMwhAnS02wOE8lfBiKmPcb5+FCwVkpytXwtPxFSD11Kfml5TZJSQMalsUDx4fiTWVyYOAJPYR2/1I8236EOtE3zskWuclERugt7ICVsWsbUsVpxVDS1Vc867LpemsoOMZ2aVcaSr3wZj7UnvVd5bZZCLo6h9LcSH+oQRJZRdDWhNKRYP2V4J1bIMXd6sE5qxbUa62o6h8OkL4GNPV0kDQ+U7pQ==,iv:eyPYrAR77OIHkz4XqKBcqScTwhMKzQRZrJGnntCfWNk=,tag:oxvH1D5WUBd0s7QPv9zDgQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:mQ==,iv:961id+pffzE0bnEsz5RLUx9ligsLlfvpPp4gs850WIU=,tag:tmu3B+Y5Gm37OTSY4shr4A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:RiO3PXNuhA==,iv:9+I3kL5IzuEz1Jmjn4yGpmViGMRktQvaou5tfd4ndjc=,tag:DAcsBFoVtWMmOxS7MEs0Pw==,type:str]",
"namespace": "ENC[AES256_GCM,data:dexHsw==,iv:pOTrVR1oy8Gp8xVmSN1tKmBVhdSct5wSwPnXQnMqGIE=,tag:DjUBIUgMjKQFUQzhRw/3Ug==,type:str]",
"resource_version": "ENC[AES256_GCM,data:K8nWI/H1vc2d,iv:i+jKEan7jJN5X2LRttuWARRUrO2c8vKXbQbPZZY5Izo=,tag:4zMlc7nVVmK12O+6P4ZGpw==,type:str]",
"uid": "ENC[AES256_GCM,data:P3vNC9cIwof3lCqblzfRBgNR2orz+fElnLzDeEBbtMRiIAFw,iv:mavCyWmYSNws/jvtfnb+SZQYyVMr4McrRND8AQCIqW0=,tag:2j3k/uCxgXNfLu3XH0N7vQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:Qr2sC57aFQ==,iv:ehIZiCliRqfU1MyxAg6CpP4Lg1AXfTSi+v34rA5dXYg=,tag:Q+aPRA7G+Hf+zqYHQCj6qA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:RJkFoXg7lSX2VjXtwV2qfNr/71B/Ma8=,iv:kcHEECP6FmMMznCXMESfsqbKOIpBRw9+VWFnSMw16Zw=,tag:IK3kqP+8FxrP5OZIKArqJw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:2BZd0w==,iv:0lTbvkjimzcocYtMmTRzoILqyFTPmiVvabv6cN1Om3c=,tag:B8pBh0YxQ0ilQqmYfsqXLg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:uFli9w==,iv:SI3PHccFAYvi9g2HJ6rE2wGBmAJLJGahgTNDKiQU5Zo=,tag:pLAhczXZ0gnZXV58QGLImg==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:kA==,iv:DwND5DADse91sFsgR4zK4Pb6AeSXMkafQpd2EPrmd0Y=,tag:YeVGjX069sXZDLLYLeT4Pg==,type:str]",
"path_type": "ENC[AES256_GCM,data:GtQw5C2FqlCx7cbiquc9f21T7iq6mg==,iv:XTRkUwwAkuDrygslRDcnAcPEAxqR8MJmyjSdnEMpOB8=,tag:ZmTGYdfgaYF1mR0AKm75Vg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:WtVLvKW+oHqq3J7YHGbHT6D4xXP6tZk=,iv:o1MvdKXberbR0g+sNl6fgO3dNvpAgvpSCASi7TtfbGY=,tag:ZEHXeeWz7MtBj4a8MSFTuQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:bRktI5sncdJq1Q==,iv:tjCO9droJMlguW12piTaNj41BrZLPiOWv0BG8UG3EmE=,tag:Mzuo/sS4QFIKP6Bz4Ck7ag==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:RgyGj3f/M8HZeDc=,iv:z/qLRSpRh2A3FRJY1IdaF6gcPwA7ZLbmUFxzA9CPYpc=,tag:yVtJdah7//WK/E8c235Aqw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:Rm8WMwigD2jf7abu8Sv7o8loxI93jrthz2LnD4Si7z2+T6ALcgCuxNAacAn8n9kNVtsnoM+4fKhRG6BeTtrqdcnUF2oRvQyLUXx3Xsx+LVbECHp7Myb5k71wip4tvduMla0iC/jg3R6eKPUwzZewz3BXkBf4/DiP,iv:4GBOAhChaYkuej52CieMa482oIFBNs4UyD1334otpYg=,tag:Vj3CbUCDala6jGO3wh6r/g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:qUOJCe8JAqPaqrNXkGzP/mKVZowzNClVQz9ND4gqs9/jkxDV0g==,iv:MaL9tsIqRQgaPKGjexRtCsbr5b19RS+aiybC5Y5pWOc=,tag:h1S+ZOINhn0Aje0Ih/T+Lg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:q0Qf71Tuz6ElgNaUgyhgd7HPQHlz14sI6dqlyPE=,iv:cqD+JFdT57Yu6zltzvD0RuXMJ1i4f57N0Qc7HB4tf8M=,tag:ACWXZdIKUN4WWTCluw1Yrg==,type:str]",
"mode": "ENC[AES256_GCM,data:HhgXWxDX8Q==,iv:wgSflrWn9saRwB7eYZlyImQG3LpI39HU6NxURCESLZI=,tag:QEkC8Y/99x8aMlF5YQiUsw==,type:str]",
"type": "ENC[AES256_GCM,data:+fTVWPPz7rsC8odWIqIvCG4=,iv:M7B+zvUGbTjq4PPU9jwJ1avMsnUjQMZmoFeVBj7Yv/4=,tag:vZa7vVgllD9EwD9GJzoUhg==,type:str]",
"name": "ENC[AES256_GCM,data:nQmgPmrCUlbIAg==,iv:/pcVvHF1PDpg8eyopafXZ75a82B10KVNNyMu7CoYJ0s=,tag:8Iq0LggGftQbHR/1DmfcVg==,type:str]",
"provider": "ENC[AES256_GCM,data:AjtVVTeDUJhRz9/QJtPAp8YrAirX0wQi2A2AyX0ZEAUmNP8vGfOhx2MsVVzTHBuwxOwRXNld,iv:0edK7ORSjbhGukIuKEmND7cFVHl8goO0VNzKBJLK9Cs=,tag:ncvYzBfNK2OQ3bITMNL+lA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:pg==,iv:mzY5fckkmEZpz/kdbvXLwOXKve9LlcpY6TXDUFhAvKc=,tag:mTwtWhNko7fyPiE9ROvf8A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:C3bvOh8tV2AEe6P7963UShGnjstIJVqG57726QdkG9g=,tag:0xdHMyoWyy5vTBmK0F0A2g==,type:str]",
"tls.key": "ENC[AES256_GCM,data:p0KCatHYdF1Dp8FIBcpgB+3ibKduzgnf4Nhyzhdu3tWnjnqjf2CZKjRS9yJ5KhmL3h9dFQ/DYPZH9jNqK2F2s80V0s4Qpe/Jbb75Q/26vYQ1avm8JsnusjcK1OEwbEUKxGPFYGXJORGKYlWTbOop9epCQu1VR/lbh+3aYPyJaTkTB30gkI7hrT7syvhl1F+SURCKiSugyNNYLIysL1zNT8dnxpSNvw+cnydrErjf4xXmFnGSrAuq4ngP+MWaqcaAopd/wkyCCIRdu4Zx1Phk3lTSHP9otjnmuTXXz3g8wXQeMt335+7esHL9AGld/0TIVA==,iv:XzmEsb5h2XOKJNbUj0ed4s9ap/bm70DijD9ZR+QDhxA=,tag:LioOhoq1fb3ZloZFWDlZgA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:tYq73r72tWdw6c3+zyrZ,iv:xr3GoSOFleJ8uFRVCYHh+eGxGqIoZ65Xrn10qNg/Upc=,tag:jlKE/eYn0QXRIJTGmEYPPQ==,type:str]",
"immutable": "ENC[AES256_GCM,data:UOMg9Hc=,iv:eMsSmHbh17JpDjJGxk8awSnxnZdj7MWgiEJpddsRxQ0=,tag:UUFkU8xU4Qki7mLMi+ot2A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:HQ==,iv:QXO0fiP/N6DYy97TxR4dhXxgb6/h6q9XIEfcp8SJMnE=,tag:PQ0WbAO+NSOGSbq6vmsrUg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:xs6sVGRweV2pmw==,iv:oBmeQcFPYINtwz3MVB0LQHQFgEvUVlPLmOKNAImltgc=,tag:G5ZEd+q9gPaYsisH4nnnRQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:7p/1JQ==,iv:gQ/ib78SNyyWnwPQl691lweHdQkbkJRPSYPi+ORC7qs=,tag:mJ+96ulyDCc9cugKr/jUrg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:IRoC4Uy3OzKX,iv:9Qzt6UwyzwNWomh8IXmqAVZDIwtTPh/c/yNcp353ElU=,tag:4D+q43wZkU/TvPdIcmD65A==,type:str]",
"uid": "ENC[AES256_GCM,data:K8yDTFl/SYuiltVr8p0u9re9Qrt2oR1RksyqROHPndaWYxMi,iv:H8iG+fDP86AsVDXDIPMHyvrUCKHVTJKmz2cqJVvdqfM=,tag:aGujlcaL5jZf/WU/SgJxQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:UQO6ieHpGk1p8UKFQ4npl7E=,iv:vUohrAKa1q7L1t/FlLp0TOAXoaUNIw/HJZ7Kzj3oNPA=,tag:jzISwHYc+FWTKSwqkVd++Q==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:iW5uRg==,iv:cuO4841QJ9M+5MaLpLy4QbQQbxbyS//7lf4xALNQ0jU=,tag:ulrIEFE5G4dgL752DV41uQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:CzE/wdEuNdSeRqujPTQic/MZPV/NB8VMUlzvkUTPlnodAQA+ijt4Uugnj84hUVGIyKgXZZBOlpuiwxx1euNReqqr/OBOGZOvfY25UJHtRFwY3B8E,iv:hGj9gDnJwMZpVjiRkriTgyV8KQ31/Mby2EFjv2jEKjE=,tag:X9NF1oWPrzfMHUH+84D+Vg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:B1ko8bcGq7RJDermXKwoqcLs5IVMUV9Qt17hzFXOdu6eVEDYSQ==,iv:uea0/oNyFcvgyJD9jMWstQCd7rW7O5S/MBn+5qYbcbQ=,tag:f/ZD9gjkdNNgCLq/vu9f/A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:21Z",
"enc": "vault:v1:JVEBLDNxI+V0inyOgqym3yJ+HMULBe7/6yBkHFtTv8RqMwBEusk7eAs9mR0FiAnocEZD5irGgNnmPU1N"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhak1qelpscGdDYkN2TUxo\nM1NBODkwbEE0ZEt6djhOQjRuOVU3eFZtVEFnClZ3NEFFTlY3MEwwZ2RLK0JUQ0V3\nZldSSDdVRXR0cGZFZFp2bitteE96TlEKLS0tIDlyVmMyTS91OFhkRWoxRENvdkV6\nZ1JnRXFoT0pWaVpUMmVxekFpNWw4Z1EKCoUdfrvhWYWXxFYBAetM6AZPZU1m19cK\nX/SfWLw21+Tgl9RMata2ybUxwAC6m1WRNQQrhFfEOi6jtaTXtFvnZQ==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRU54QTBFc1htMS9hOXp4\nSGUzcDlWNkJuZmlQVTRJdTNKU2ZtWW5rUG1JCnZmOXNIUDR1aGZna1MvdjByU2F4\neUtKMmVGWUdJUWc3RGp1a3g2bXd3amMKLS0tIFBhTHlCTVJOK1BMcC9xb0V5QXlh\nL2NOWUI3WGJEZ3FZR1JEeWNGam9mdWcKmmWrnHcvT3M2NacBmGaPI8ce1N5eArU6\n2ZPjUP9x1OKHnHclooytEtqxq9oZNTbNKVfh/Nd965P9DE1lRd33hQ==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:21Z",
"mac": "ENC[AES256_GCM,data:Nu3RtGLbyg/Z/BU0DGGZI79i+2UcKFSSlmh/AwbQuVoGj/MSiGGv5jR2/KBfQiX9YbYWWaIVoa6rK0Zt7j2tu8Kf4WlY7AJW+3lRfMjpFyNzntX2rQa5wo9x3L5B6bbQKZB1tFriwitbDePRVv42r1J5B8DWeBd86cOpl1xCbpo=,iv:yawH2/W3ih6pyUj//KW99lgh905lLV2Ag6RegiP87z0=,tag:oq/tMnNqGq1uoemhlVSUxA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink