viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
infra/state/stacks/excalidraw/terraform.tfstate.enc

725 lines
50 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:GQ==,iv:0KhrTWuOisaeGSEBU6eievZKNBRPPTHmpTUbJD0AORU=,tag:2OnhGyq4KZvxrhunVo9I4w==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:xbs/lh4=,iv:/JZbzIZSzLI38JjIwirE+jCfQ4gDY1mwqHPLlC6nmNA=,tag:GjgzZ66e1n5ZNEvTiedBEQ==,type:str]",
"serial": "ENC[AES256_GCM,data:Noo=,iv:ipVOm/OtKKtq9yAN97aVat1jIeiHA3fi7XfltRMl6L8=,tag:7Gdqebiv/aCpG1U1b3vMPQ==,type:float]",
"lineage": "ENC[AES256_GCM,data:ECanuyIBCGbkrKfKdk+2bQBruyDSJC0+1WncUkUi9+qbZ6gZ,iv:mIHBjIqFgDmP2o7HV2srFv29gjwyT3L+2oXG9pG+ymw=,tag:gvgl7RjGRFKa/xnvKjo5ig==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:C6SIi0e+Ww==,iv:esya3ml7wJShmPVNiq5BJSVsjm3YSE7FScy6gm1Be88=,tag:Oc1Lmy7uy538OxuknM9X/w==,type:str]",
"type": "ENC[AES256_GCM,data:7+63+EynVyAm8aet2vOFVOp2br5M,iv:towUzNzDPZfWSZmAzvAWrCap5s7KG9asv9VxHbKL4yI=,tag:D/L9iWrw7hYB89FSdvVvSw==,type:str]",
"name": "ENC[AES256_GCM,data:C0fblnbSUhp5eg==,iv:DM0+V8dnsgdTgmn8BB7NHKAWfWdpOdLaQy/QW4WYxCc=,tag:gYwTJgiJIP4Te2N4vn/FaQ==,type:str]",
"provider": "ENC[AES256_GCM,data:35/PJFkpGfiu/pVSnU7qQIXG9BuHJOnQy1U99ijDw/shYl4iZApJ13iBbzhNkUM9LP0FYj+A,iv:g02TOKUAFohwN5CuhbZDCNQIdsTOMftiXHEq8dOPvGg=,tag:iW/0mVSChuYUwjuIYZ1vUA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:sA==,iv:Qlhhgfel/Uuc+3fP5eWBu7WLtR+sSZyBGSCfCQ//uZ4=,tag:0YiQ6FGfRryfo84hU+ApsA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:HmqLgeE0LvK/6kuXUy9z67bE6A0B,iv:1Dg9m/nMoYKnjqziFbo0vcwGI+9kDo2ghtD+8LMP0LA=,tag:j2AAFY4kHKpv7I6/808Siw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:R1A=,iv:hussBBnx574OR/pwCTKgs5pkdGAAd0oygZBs0oz751g=,tag:OWM9+YngXsw37PcBXUCo7g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:YTpW6vMgnsHYwg==,iv:iOHZricfHqplTJ76TsaMQ+m+JJ0MLTLx/eFgR8ieC6g=,tag:t5KkqhBRqpF/o/78FnWa1Q==,type:str]",
"tier": "ENC[AES256_GCM,data:Vf/MGC4=,iv:foac8AxjQYFz/ZUDmO1Yb380Vos1fxgrroJy+QRqsDs=,tag:x9j+s44esgnP4RxFmvvgiA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Kzj+Y812ZnWa2Q==,iv:hoDqd2QbFGg1eULCXNQr1p3P+tMWK2hb+pPyFdbDcUM=,tag:9akWpK0iqfhmGEuq2XFvaQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:MTBqaEF8YBLn4Q==,iv:vTxGgF1HtvgxVjHgNkeHQzB17yrmCmRrrtOrQOxtjeU=,tag:ZQ4pN7hIeIkbNIwWnMilkg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:yvFTmh3vjuVt,iv:cz7uxkS83yVy+IP1xZsi9PMgRul35ZQ5hGN2Jj3ezQ8=,tag:0WjzXQG0pe300NOIG8J6mw==,type:str]",
"uid": "ENC[AES256_GCM,data:uFQ74pSXmEgdZKCroFWQoXTA/oHILQV9KKoJ0wI+v9pwgQ+7,iv:mjd/EfXt8YRSbMw0Jguh8z5P95qqCljI+zD/xyqmT1I=,tag:Wl4nj+3IfDnVpQebAG/ccQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:tw==,iv:yKcnDpfh1uXvvFsHGYth250Ji9Wic6YYFCbES2MDGuY=,tag:AkxtGbRxvlBZZQkjJXVt5A==,type:float]",
"paused": "ENC[AES256_GCM,data:WWISKR4=,iv:njufV+vd9M3hA3bYtSqEDglzgS5YEvtoTNGc29vAo58=,tag:+PfR5VWTIPUEcBd9su+wog==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:SM1v,iv:BnKEFgKtzQpCBkVP6Pm4Rs+0WHRthNbLwEl0bZfsP/E=,tag:2xju3aY9NK7wN5B33gdrCQ==,type:float]",
"replicas": "ENC[AES256_GCM,data:tw==,iv:nQiZAB76AlH254SZdOGl9lOCqEHT3bcGhgT8doNeFh0=,tag:kkkBQDAqbcHiXfHL1+5UDQ==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:p2w=,iv:tHw5ytIoDjPnSxgiFtmmkTC23QtKESRk9G21Yvol6g8=,tag:VaxtgnMQ+E31yNM2kp5H4w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:1cqUJRo/nX2QAg==,iv:iQU2HFI/qodTOT2jYl9wq0ORO9Qlvvbkhb7PQz7uYyA=,tag:/2GqO3Xcb5OXCR00C2M6Eg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:42pc,iv:ylfUJvtQfEjZPkC/1MCqfwB4hWKFB37fbGHZykvwlmc=,tag:Db3C1G0fjQJYb4UuAIM/xg==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:nqpu,iv:KWeuIb2OEmo32Pu/zEtTNEHSuxtE3Whrd6jGt8mUN/4=,tag:h8j16X7SV2e8i/h1BL67JQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:XzEE544pnvztjxVjSw==,iv:xxiWHfEllMsm7PbKtGonIjH6S5UIsb1SnMFU66mnlnE=,tag:sH2IlaBLluGHbz+qLHum9g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"diun.enable": "ENC[AES256_GCM,data:28T6Wg==,iv:v5kcwf9++hnBoFft0zNLUjPFA0fmnSFGJoRW8z3AlqI=,tag:7ytMHMK3lm7iRc2o/2OBWQ==,type:str]",
"diun.include_tags": "ENC[AES256_GCM,data:DUTbCQFLnww=,iv:kqKjUGkiQwPSglXiOyPUnq+3vWfowbmkqaanmxnEKYQ=,tag:iMB33Yda/VzwhnklDS7afQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Ow==,iv:eM8/VhDYowHOTheccRWHiEkolT+qfX9MOV5QunxKQnk=,tag:nmhtG4g5AVzBao6zspmKsA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:lS/5XUb4t/gX1A==,iv:Xl6qzo355Ck7x0RrqDM0SZ3k3ee0avNM5deLByz/8V4=,tag:x6hvSnWN6fLvrjiL6rg2Eg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:pw==,iv:W9KixpGMbA6YA/vMAqxtnO8C7iHyyu4LvT9MxU4ycxI=,tag:prgSvRX+1kVKneXeWq+n8A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:RYHYJg==,iv:zDUWHk2AT/q6iYX2A6PahojEyvA31n5SRSKCH7R1y60=,tag:MhAAZrs5iCsadm22+u7a7A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [],
"env": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:4JeCUe1ZYVI=,iv:yxg/LbB+zUdT17q+ouKiqYWaZk3pdnLP/BG7Q2zm41s=,tag:OCKJqeRqMui2OiS6ON20rw==,type:str]",
"value": "ENC[AES256_GCM,data:nsIySpE=,iv:BSBCzDKmTARmarShn/Y5pbGafi18YxOjKwTcIdRi43M=,tag:4EyFuxPFyc5tmPgW3UvhWA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value_from": []
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:8ZXrzw==,iv:6/ZQtYcHxv1MhY678JExamQZSf1f74otXiKKQutL/hc=,tag:c13rWg2ZlRJgf67yys/8zg==,type:str]",
"value": "ENC[AES256_GCM,data:JBmGqg==,iv:pnnV5dDmL7qzUVZrOJz8ybeQcchwjRVvJ9T09WjuWXc=,tag:IeZeafWEBzxatTQ0P1ThYQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value_from": []
}
],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:u93wV7gMAYZyenPsfcpFqg0wBNhSp3urhOSEBHG31EzYnQ==,iv:bhHA7try9SQ4YCKPWhOPwFPyxnQrarsjdYNRRnh7aVE=,tag:nCzgAvl2GGLpR3wVK056Nw==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:XHaAhcAeZfn0yFXL,iv:TGtPTAzFsaklS1gD/HPiEo3lh1efV/WYEHMNYy2N9JQ=,tag:5J5VEnkJ4r8JnRmqsmxmYw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Dnh8pM9BI1k1fQ==,iv:DYHehYJs/Kvr2cZptExktxW0YAxp6JzETrBDt9LxOkE=,tag:S7/kecfDESQ/J9ZKKpwTyQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:2NzOPg==,iv:tyuTgGNrILtNqbmcoTJAqbm1PLqCDf/TLxKRbjR1ARA=,tag:ljL7gV6qFtjm4CcCe+cRJQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:jw==,iv:E3/0ZyeiHwMgW7DJMRl5prBbEFB5JypL22kJCqUUeUs=,tag:NTVVVikIS13sdVAP5CoO3w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:ro81,iv:G6J6K5HTPBE+Y0md7R1cuSkNdF+vYUp3ZLNFw7H+G2Q=,tag:dy1OSZgNYc5csfwFxpBn7w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:v4J4mA==,iv:fItgdd3y/dlnU4iu9c9P4uahcQU+45cXkDmNkrCXIT0=,tag:obdKet+pefpnO2qCTMVtyA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:NM31,iv:6psb6U//sHTh272liS0Vv3wehDcy/uYA2DEUwXMZaig=,tag:ZjOuQLUpJ32jaVbJ/Urp4g==,type:str]",
"memory": "ENC[AES256_GCM,data:ixgI3g==,iv:mMmBv9WVfUs0kb8MA49+rl5LaJKs98JWSD4yFpCQ+Kw=,tag:T9Wr+65AgK/g57Z9e6us5w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:yJ+eKW8=,iv:gSeJ/Cy1wOBDuEtdqeNhS7MXIdgeiZyl50MOH9dPPNI=,tag:CU98TdAJPWR4ZWYy+TcU/Q==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:3ScwGi8=,iv:2K5nqCC1G2HJz9a4oOSnqduSuP2sI73IhXj1FFoxjMw=,tag:fRHR1ZexBJHZK9e7L4HfJA==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:WqlbalrLYIQCSPcXGwQG8en9Qyg=,iv:bM+4W+ej5B1TLvwFoRUd/ojF7imS5C6NKhUrhNGQ1dM=,tag:VhnZAr/00U5CTx0dWBcyOw==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:7PFI+Q==,iv:pQha0zKM7G4loV5O6J7MgQiajSWBOxXhHtUUbI48EKI=,tag:zSnrbbF7OkMaX0ZbJQgPvw==,type:str]",
"tty": "ENC[AES256_GCM,data:W5qbo+U=,iv:2mMuAIi2D9X9SV3KliDYzbgA1vrHrirVJz0uVzRKhFA=,tag:opw3HA3TIW43PnJLwGxObw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:Ro7X6oc=,iv:Cd1iUsDvfNVPr1S/Y+CPw336H8/8jhW/K2EaKCtympU=,tag:mPMCJQnEvDVoE/I4z5d4rw==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:hkPhXg==,iv:XLursSgKYg1tRJhhzr5Eyoq60Ovuwd9bnmafPRQp0es=,tag:8QHYQn4l34mumdUEUP9xZg==,type:str]",
"name": "ENC[AES256_GCM,data:rIBc7w==,iv:roEH4yUlgM51KW/knedPKYe6MFPIWiSu5/TGVTTfZgM=,tag:pLp+3SEd7oYF73llAN7t5A==,type:str]",
"read_only": "ENC[AES256_GCM,data:dlztxlQ=,iv:hznoWMjyYTqiK6hIlNXX9LZpdYrnMlzor86qkWr3eEg=,tag:k3iODEzbDUPz94h9c47Zjw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path": "",
"sub_path_expr": ""
}
],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:p0+5wLI=,iv:W6NDtELTVV/PdjJm30HsOAY9zV2mUyUFojmNETBw2f8=,tag:aq4Be9g1z7jMzcKjkDPo0Q==,type:str]",
"value": "ENC[AES256_GCM,data:uw==,iv:rqZpodKy0L/ZJEHXBCrxUWamO0HdANZPz+ixBkLGpJQ=,tag:GC1EaX7Z0IPtL9SzNXB2nQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:atqai1E8mITeS04F,iv:V52GNc5AWh+4OJnLswXJrvYqy69ZQpuyG1CAhdzRb4k=,tag:GqXkLliRNwr5CdO2KDx6+A==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:37bt7A==,iv:r9ote6lc+OWmYiK46yCrdt6/ULX2MeQNoh/h/zUUV9g=,tag:/XInMEnodDKv3onGwW4t2A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:ZZ9ViaM=,iv:8fujNnDSCI0qthg6cCeEpUuqIs+GThJUmIeZqzc2dWQ=,tag:V4Xut5hpzeg4/ne3ijp+vA==,type:bool]",
"host_network": "ENC[AES256_GCM,data:3N4yUzU=,iv:I+IlLjTVQYAjEyZknni4aAaU8nTHWYO5VvhGPZ8uKE0=,tag:2wswhUxCVuXd5kTnS4vMjA==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:2ErPQ88=,iv:H6kfgxzAtj/4uvABpjK2C1/4a0V6/AFK7a6xUnkkeWo=,tag:dSl2XTZPHLDr1IJ2YyqEWw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:zeyrV64p,iv:ICY07nspRKtkZhwLScO0MVNM2W6VewjuxTc0q3qb9pw=,tag:ZLxvii19QF8AEFOh6B3zEA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:nEg1eS2Z43pIi0boUZcpWIs=,iv:xxnIoU907U/3RF6CRdkWlEkMaPyvfBs6zD5R8MM6gbw=,tag:mpW0QaZ/4shDQCA6mLc/9Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:RQvwLpc=,iv:Qd4lUi9qwcIXM0GtxtTTdlLmmppWmb4m2XCooiN5JFw=,tag:s9pUcc4hc4v+WdmtH95xvg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:OgU=,iv:YLXIuvnGkaDQ0N6KoOwA7x76jh/8DC6/FYnLJF9pJY8=,tag:E7Uvyjyl6IHqrP3XCtBkIQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:aOv65g==,iv:LqmGUX+Tx84dgfHNmvqH9rmW3hI7jkUwTNqj/uFQi3Q=,tag:cVmYJQticSoaqhax9dYeCw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"claim_name": "ENC[AES256_GCM,data:8yLvX8RJIA2dUseRCRP2,iv:54Nzq85RSeKXXle55Y4jAneuWZULPZPgbb02rIJwUBA=,tag:eZs05P582bWH+LS9poOC3A==,type:str]",
"read_only": "ENC[AES256_GCM,data:vf1cAEI=,iv:IKUGTZXRPWW9TM7CBCDR+AMji6r1aA/mLf2xgModvQ8=,tag:W5uSlm3dhILxf+86DFilqw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [],
"vsphere_volume": []
}
]
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:AUgKZQ==,iv:ClGXBgJ6CgxURiygiEUR1JhrBA21hY2wFRC+CISsank=,tag:9USxmjFDrBqCuFfX50FnOw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:OH5Wl0Qe7Z7h5CSgci4LsVGx57NM4NE43Qg1cMsxLClIyBFQHtI9KtoCt8jhUZVUDevMb0nL71SYQTYnggVmbVfw0eAMEjXRWZn1r/O/V966W6ujGyMdQrG6LZ24fZfzBgj+cXQKFtYGQ9C8Ma4sYY8tpSN/7+OJRYteaF5nKlwJVg1YxHzMI6WUrOsZoh/X86iEob3WoN4EGNRHat1eqjgAdwmvx2QDQ/u4hw==,iv:o2E4fWtCYq6tkKcTUo/UXOwsXCX8ijro0uREROzS0c4=,tag:9YffTDTdtlq3XZNvxt2cOA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:5K1+ItVsssSWbQQ+xzBSwSCMRq2H94CNAKgbcO4Jsg==,iv:ru+54/b+6p8SOQ3gpxNByAv14/M6qTUXdy7XwD6ZKh0=,tag:xjfJjjB74Ir5l5cUXaozrA==,type:str]",
"ENC[AES256_GCM,data:WU97ISKiVRAcrbFUUT7pQga39lF6FC5JYWqdeDsH1yaXjB2hI/bfwZHlFT8h2286Ri5EtqRVfw==,iv:GXSp0vEIFMhkQ7mQVN5amqCtVQreU9SWAvJAr8kk098=,tag:AM0GLuedWI7CqE25JqQH/g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:UJyokz1rTA==,iv:G77f2pRG8CqaXvkvgLR1dzU3Xm0iptHUM89DDcvGl4g=,tag:0HcRnHdEg5eZKpUc89BhUg==,type:str]",
"type": "ENC[AES256_GCM,data:X3W/EGYLcNUmnL30a4yU6siAqZU=,iv:8AIxuyqaGLsQgzm2buoMbLdYt9Hzc4oSLuUNv+nUY4o=,tag:M8cXgV/5p9j7qmBmUIMqJg==,type:str]",
"name": "ENC[AES256_GCM,data:ybk0xJuCKQK66A==,iv:ntzHKDVwSR/nPS+e9pFv9fIqSkvChRm0LX8KNF+pTU0=,tag:uF8wWuYf/hQlCOMoZtdOlQ==,type:str]",
"provider": "ENC[AES256_GCM,data:NfYSgy48Vq9GQTQlFiXaxLtN1bXhYS2VnwOdJgd6PiUGzYT2ETPr0bxu/fRQv7/AyUJxT+K9,iv:JMznY6qu6vvmOZ4dkGMT0lykuZCUdx+REmhTCzeOHFg=,tag:hRul+/MbAwvnrw75o6r7Bg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:oA==,iv:NCJw+keZrWo8o52n2aNXRBS6coD/CkM5SLWctw7HDso=,tag:+/lCczVFzwTJrl3v5k9wog==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:VEu8gC6UxlL9gw==,iv:ZEaDKIIoYq1m3fQeoH5Si7mM6YBo81N1D4uVVEFybXg=,tag:0GvaTbUY/xKwCGYyymTrFg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:DA==,iv:f119ZHLFYbqAJxF0FukcJtfadUsOwlo6EoQic2gfHR4=,tag:tcFi8FYEp/d/Zw3npHDsEA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:M4VW,iv:Tl4gQijk0AWkfmEViy2KykI2P66XQ5hCiIH7iO7MJso=,tag:M5mXeBjGelpUYGfRzwGmzQ==,type:str]",
"istio-injection": "ENC[AES256_GCM,data:8EEQdwFfvH8=,iv:llG3fMhXuPaSbh7qUE/auxSxC0QEZEgeRlOWNigPTKo=,tag:o94MH8sALDhRsx4IyDOOCw==,type:str]",
"tier": "ENC[AES256_GCM,data:yRCTVOk=,iv:cUhfyH1ITxnPkDQHXp33+SNKEWxpxoemS7SXCQj2lFs=,tag:TDmLbN9GGLTvzg04iVVezw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:7SneM8nM47W5qw==,iv:qeMvWSRfhQwuiXZpZd5pdG2Jtv8CIulzKQwIUx0Oakg=,tag:o5XogiX2MdJkVyb8B/asWQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:LdDu8jvDA+oq,iv:9frwA4OPyjdpfucj3gSKqcNS3hqPcEd4SBnBUXZluTg=,tag:5zxb2wzKJ5bIZuLlBolwzQ==,type:str]",
"uid": "ENC[AES256_GCM,data:Y4GD5char98VfZJR6KaNSd0ugZ6o8T0K41Sb53GaINFNtTt7,iv:1BAhssFFkqgLqsVmnZS5UCJIb6V9huT34hu6jVjKo88=,tag:YaVqSWmPkRCPrrs9XblCBQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:wFzidWU=,iv:Bm/CRg+SbD/Fl4Pp8bqCDItHz0YnJiQcfXf+y1f+jnw=,tag:mQ4yima/X/k4YASCKWOZiQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:mDJWdXx5fU1o+RjVDYngZE56RPAGpWgVhrUosih6/BpivoZnVE5KNOKOo7+q16kMQoU0KJb2gUxgz9R5lbxu6rulpV3FoqGTFSHzKoK6WGXBCVneXbyBBQ==,iv:6049wMXFTqu16YQJAb9gDNdj6f6ZxahV9jBj2uLx/AY=,tag:dcjIAOzB1Y/JIybaPeUUyw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:CIc1quieyg==,iv:wLxemH0V2KVhgPcR6GIu7ffF1lVRiKALkerwakYHHG8=,tag:u/8io1GmCMNOCDnjkfg47w==,type:str]",
"type": "ENC[AES256_GCM,data:IWu5Tn7J648FqHP/WN1jqaiy,iv:m9uABGYYiYjPBYYJVnWe4xT4YejIBvx7A3GU/II6MOs=,tag:tbcjdN2ILu5vkmG2uAsa8w==,type:str]",
"name": "ENC[AES256_GCM,data:eCnFBw==,iv:vdW+8ovNezB1+GYqCPd01VwxVAcFdCo76KouQuQs5zc=,tag:m7778UiJTodCaJzSTnuNFQ==,type:str]",
"provider": "ENC[AES256_GCM,data:f8PxGJeIS/71mvWA3a7FLTTYyDyvAolw2BsSZydITe6lcGjE09Xpz5Ir9S//cj3JE0QrOE1E,iv:W8asyB30CyGKgzpkadAHd3+hTpff/hN7DNYtr1tj4vw=,tag:zB7ZEf5/HNA05mjO+VVVwg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:/w==,iv:g1lkRM1LiF+md10HiAh82BjBwAaSNTmTo+T0ncOUYXk=,tag:/wtEaTsFkO2ad+r5AV98uA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:t0G3LQKVFarwxhzCgjol,iv:DpOz+j5dUJiFb02Eo9D9jVHv2bThA6ozzpOWBVKxnRM=,tag:MPDo5L05JnjyZVEFAmfbxw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:cQ==,iv:29Yuf1AsscylE1myvEU3RmYcjakYn1Qko46wMsqUGcY=,tag:DFTCtuMp124SgJ2JdnNvTg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:NwNwnnVe2ZJ1iQ==,iv:v/JJY+iqw20vavhYLpxQUGvYX0PFTHjfnTQpdpTzYe4=,tag:3/FbueM05nhipJkfMaTVEw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+5Qpmg==,iv:t9PMUCxEV6Y8oYLbnF9vWMLToSzvgivL4jW4bx8pvr8=,tag:u0XLQfaXs2yHSusR+EL7cQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:xH2z1KgAwKoIHQ==,iv:kQv1UHBvAX12PAJQNtJmu8QcOUsu7lpn+rMBDlYOsDY=,tag:qEGu1wNJM4faJAPedv2Wtg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:KW1FWpN3c1+3,iv:910pAlAnziF2Z/Gbwk+/zwjJ2jjLEEjJ5r+1kj+x3+E=,tag:7Y2Gt1CKm48YT+BXWip5nA==,type:str]",
"uid": "ENC[AES256_GCM,data:RRXoFzHv6SY3mvIMTBQqf8263WBZ/VNSxbbx53z7+xBfBozA,iv:z2D9FbBbhvd5SZA7VH6iovkLChiY4UdKk0UeepwZCew=,tag:AkmrTC7pCKez5OhX7oEj5w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:ekhBlw==,iv:NxI2/dJxPYJOtd82U5r4szm3td/dJ78JCNst4K140pw=,tag:SNVqE4bOJyvjOrXZuT/x0Q==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:JvmjqaoB+rNZ5Cbh,iv:zMzTqTU23cR3PxMvewvPeGB33e2itnm78gZf+vMDrhw=,tag:wYkTpGzQggj4flP9b8vapA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:BNjuyVdlRinyEkEH,iv:1m8dUzvTEXGEjfJ19F/0kcXBVama/fi+TN/xj65uBqg=,tag:QjR2rOKttuCWFRBCIPBlLg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:Lg==,iv:XvMqPKGcpj+4gEKy8BYwTOhT21boH8rpen4eC3yXwx0=,tag:D4o575ks/KkBCkZuI+kQug==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:7rbT3ky2tg==,iv:FAZ4FrSTCfQo6+Tfn1lsnxW5RXRQjwCtD87pQi64RA0=,tag:WVyUvNHS3IscIDGp8YCZgg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:RYVEjw==,iv:Tq9ENyRqoVx1qWqWpg538HDwIOPMzw5hzvxFydWfoSk=,tag:sPHr/fH+VPniPAqN6Pdh/Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:bnCodv6InVOXkE0=,iv:XVo+sQvaSUiWCfZFOrGZ6N2ylUsuk/W+Kbj5rrx046s=,tag:6amXgnWmRkbI/9ca16LXqA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:z1dL2w==,iv:MZWqKVqNp96mxuzOggdufJHDBbZherZVk2KJFl6ifMk=,tag:nc2H8cpfloUcGE7oPMkJ1A==,type:str]",
"node_port": "ENC[AES256_GCM,data:og==,iv:RhlI8xPMArrFi3L7KWAuqUdg3DyhUr3sIZlkMNgs438=,tag:4XVX1hN8a+ogW8vMKMYWMA==,type:float]",
"port": "ENC[AES256_GCM,data:LUY=,iv:Sebb+85ZGpQFpnBWUH6A+unQd9Ot1QwFmG9abKlDLIY=,tag:RoqRpZzJqH9x87Yr9KFzGg==,type:float]",
"protocol": "ENC[AES256_GCM,data:cm5h,iv:Ul7C/eBF3EKem9CMlQGV7cb2zUzQD1mzAtFI5hguviU=,tag:BXKuMdWGoxRtwcJojruJjA==,type:str]",
"target_port": "ENC[AES256_GCM,data:v+GydA==,iv:ZZQXsUvE0IgPGs0H1d+roc9ifaQXWKDFBBOM9uYAhII=,tag:woL/NtNkVOLuyls2sbMRCw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:Kr3NUqE=,iv:xHqzmn1SOWqrxLvwf3EuMMZy5QyMJNxGxmCyR5xZwE8=,tag:sIcHxvmTdj/jmRpTEML+Ew==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:At8WlHQ2K1u90w==,iv:rW3K3rgZLbHPwZyON4EwdBb+izf7a70kZLXNEBagc1I=,tag:mvsRWlN+9XnfGwMmhGlykQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:QF62bA==,iv:lfOYILq93iHDxYmmuqdcAtnUEagYZQgaGhIw1hE0jeE=,tag:VkeYbVVJ36RzGq9wvy/cZA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:SI4dG1eXJcgF,iv:KPpE8Is1LiEeWiBgbH8hB9ifZ2Ruqf8ZLzbM8xFIfUM=,tag:IZhZmN6zNqiHWJip2FClaQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:nrL1TQ==,iv:poxawitnoUR9IfMmyUw6+DXgs5iYzJmCzbyeD6ejMyE=,tag:kVhbJltnvVbWxNCu32qzmQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:2XzqmoGTiuHwUD+TT0rgYkaYeQ9OQ/oyPGL4d98Q8XiNYmcAtD8kYCmHZ7lFUb92/e80p9PPlh+NfuBl5CsYQa+F31NWPGMdqawwoxSo5yU1tVGRmwwh0mI+N+mgp0+p45xQsDtIdDvBj996/vOhjul6Jzw=,iv:UjBNaDYFUfzJpDgT9SrNTqoca/b9LemWCz5NvA9+W/k=,tag:Q79dfYYp5hm1hiMTOqjwbw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:7439LRK9a0Jh5BAO9HkEvkHfnLvDF3rX39cDFb8D7g==,iv:nR9FdikzJpJzwlSbFc8WB8TVx41acmFV9Ch8Fv8sPmQ=,tag:kN4c7OuE53byX4NPPFU8JA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:ubO2/c2fVlLPeQZyekg=,iv:DIH2ifFhw48+SO9ZJb/isUE8BUiMTu5L51M/gd6PpCI=,tag:sxMaLD3DYcPiNxewLeF4VA==,type:str]",
"mode": "ENC[AES256_GCM,data:G6vZJxzThg==,iv:K52sZzq59dCcFZeO/YoiO5KmsP8ngG5u8YN8H4hPDUg=,tag:hzL6YiLD+PMAKp340EZazA==,type:str]",
"type": "ENC[AES256_GCM,data:ToO8USotFTurBQiWj6rd3PDVktlR,iv:Me+Jzzyk4EURHasCwX1FGHCQMZgYAF2Z8lqEVTu4h3Y=,tag:Qk+N1et4DUibx3otWYhytQ==,type:str]",
"name": "ENC[AES256_GCM,data:XBIgdTHEswguUnnZhc9s,iv:yZ5XWOqaU1eEwd635we3K6MDqrcTfMztHbTCZdtE1h4=,tag:cJpdgW0nq9zQRuyXonCSIQ==,type:str]",
"provider": "ENC[AES256_GCM,data:oyYeOvkcemyZrYhsbcnsLZDck0nHN0gAi87e0Glj5m+17qDA1a3/XGsF7fpXhMa/vuAJ3r7T,iv:H1To++pVQTtpm9y48ycj15lm/hjvN8uflWWCl4hcinw=,tag:G0a0Aac2TgC3m3zMGCv6ww==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:sQ==,iv:S3W10cJ1wdzVtCG+VWsObZNOtRlyAiFAB49uLK0KPK8=,tag:YORGoKujtFBe3lpfsiizQQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:RLG6n67rAMgbUL75e5tt,iv:alR3xzFMqvmUcmcRawiQdco5eb10snwzyfP3hpSCgEs=,tag:feY5uQnw9zijt6FhRM+eUg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"gethomepage.dev/description": "ENC[AES256_GCM,data:lkzcNn4NYUpoILlJKY8eMNyoRlesA/4r,iv:qPtIBdzYYcpfNB/+g0taQK56NMXbG3sUr7pvDZ8gxPA=,tag:iG8NXfdnygae5ovSdescuw==,type:str]",
"gethomepage.dev/enabled": "ENC[AES256_GCM,data:/o3JQg==,iv:FJCwqUuDiVXD3n4kiI9YezdQXdZdmsgiU3omPyuM73o=,tag:4D+1ktRrTc45fxbbI5Es4Q==,type:str]",
"gethomepage.dev/group": "ENC[AES256_GCM,data:Capkr1tpQYFHZnyKQYPyPQ==,iv:MO/jNAsk9aQ3MGFy196bfRTot9uE4ao70bvLgd6CEYc=,tag:F38A9KCAC0QjrS7pGeIYew==,type:str]",
"gethomepage.dev/icon": "ENC[AES256_GCM,data:uqh7lGbwJiwSyHshals=,iv:VMqNmtJChpDZUCpM6xsgUtqstkUJK1fOAMYiaLC+uFU=,tag:5VyiVP++O3EhqnwJfqIoYw==,type:str]",
"gethomepage.dev/name": "ENC[AES256_GCM,data:Mee/CEDjXwxwiw==,iv:ZjFK/RNgKWntoasfsCoPtVYQnRQFWr5syB3uK8Wh10o=,tag:3wWjPLpcaPtItV0vLExckg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"gethomepage.dev/pod-selector": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:qpexpztUu/d7,iv:g/TgImLaozdYKk8uWnmVU9evLsG3PwVNSDTXP9jIi2k=,tag:/x01meAmi7nGlyndCO3JWg==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:PeW1KLagIXsHqzzqMZBWxnNORamHUuvDI2CPX0Huh4YjsHV7HoPFLjbOrWXHlqAKSHitSa3k0m0w02kT5u7JY+8H3hOpjHYIeregMePF6oXY1nQWpB/Z3AMFgkzpQiarcAWiv2QABlOOtWMEwvSx6ud2gqfmtk9m3XaeggC9IhfwMymTz3Ai5n9t1aTKf97n0Y7KO1hJdkycC5zfF7h4IQqcOL06nk8zjV4KXKpLUL30dzwulJpgwaj71lvGTU6aDx06PbhU4pa4+uO3KJNOSje1jx5zAhjpxmJ1Noh5TIqLhdQj4QQtO7pNvQcFr8w7XEYU/4CK+kC66EotxARRSAYj45b+RfaZ3K953VzQc09lPdEhlL1REtS0lPGpyUYLwpPGdt8v7bGAbnIACBB86vc8K++nhP4AAkJCZdC8rHPm+RaTZ1CV1A==,iv:9pMu5t8vM3+v2qMVeULYI07e+C807RqQPX21PxoVNOE=,tag:CURrzBlFulKOXCeVor9uSw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:WQ==,iv:LuJDOGzGVuIsoHywWjpGGqzb1XeFQwuVcbCOz2rRbuY=,tag:35vO4Zs5bJWmG1Dexd7wbA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:hJnCOw==,iv:ErwP0PNG/KIL3l3Ot/I7o5aNSPo1hH3IH+twsdvSyB0=,tag:69jBeOR/+eGEimP7QG8aEg==,type:str]",
"namespace": "ENC[AES256_GCM,data:AUtPV4X4aHrCUQ==,iv:KO64kp65zMhHgDcvRR4gMMhJySM2MmyqkQupDn3aeEU=,tag:d3qFFJWfHMRZqNm+Ed//Rw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:wIuVOTL2pXlA,iv:chbRtPBNC2YrmSWFVPJEfCC4OvyRZZVleDZDb/tuewo=,tag:qcPxxGVgcdJ3GNxtB1flMA==,type:str]",
"uid": "ENC[AES256_GCM,data:OgbUvB0iCLVSpiSwiceqcdwmGRCoDiFGla/Tbgr2rSfSN8IK,iv:H1A1lTnT+tjcNlp3OHFEwj6FCuEG9USdY8vpXFDp2AA=,tag:6gT/oy7iXr/ZaFvCFFQd8Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:eVE9I0hXiw==,iv:QrRNb5RwZ8mxpNqWPDVY2STIDc7R+tWmqNovqk7ZYBY=,tag:bp/U7iRD2kDDYXW3UyRqIg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:btnspRehDa2GiRIHHP570rdFSWg=,iv:1arIvXqTPoPVCV03MhS8AKzb+gZuXPK8lE2y6M6JIho=,tag:6HJCF/Vr0SK8Y43Z/+9Cew==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ey2v/w==,iv:5WiXjtU2HwmU/lKtl0NyDxRmTnGfc8Xvks6Q8ksvV8A=,tag:m/PS6o9aFj75RrTGDHDX0Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:8DY=,iv:560woIE0K3FIxWxOvpEHa/I8qIMo6GawaInV3wl4jyE=,tag:ZT2zvvB42TNs2xHLGmp8dg==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:Qw==,iv:ziAiwvGJ2YrxujQWwR5xOMpCd5LENnIWRBH3h4dMNFg=,tag:fejvwGrAcQbV8ReWbrFuuA==,type:str]",
"path_type": "ENC[AES256_GCM,data:HTFZXpzNMSJhdzb4vPtt/pvDjdCaiQ==,iv:5wzLCnKvWauIw708tMx9DuzoHlkYZBqkX2Hi4Z6Qsf8=,tag:JvWSorztGzkUss+8wACbdg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:1dMs2IXxcb3X/UuFwrssOyClMm8=,iv:YYs9ui7eDKDqzqX+nySNXyBiiuhK50/5vLNuBr0NFHg=,tag:JGU+B9POxjtUTUKCIxYWZA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:U8YsfRSne+8dgQ==,iv:KZ9EVsTG+BMnjzMdRCaP1rB+E20tzzD8sHA/QFSuypo=,tag:Ju1nC1p795M0lrqPUHOA1g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:+tSVVoD7BgQ0qwE=,iv:Eb0grAQ0sOMVrBaMknSIu3wVmSQxPJ88lqNFw37mWNI=,tag:QkQKC0ScEvv5GVgtFbPaAA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:u5n3Gm2nTxw=,iv:qPIhg+iTXyjccWHHOeI2nGbmF0HEJeUiWHF8wAdi7AQ=,tag:ISewQLiDouOvOPn2xAhlhA==,type:str]",
"value": "ENC[AES256_GCM,data:/d9VGg==,iv:YV5TfRjLDxVY35Jv/2VtEFbfPogpTZUvvjNU+uVg3sI=,tag:RE9lHt8762ClQaYQOgzoOw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:R+H74Q0=,iv:RhAbyjDASjXS9+3o9a2AfTGNP27pA484FDBYgFhEJmQ=,tag:c/5DaOtpoQzutWyhhuuPPw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:Mg==,iv:SH3HYW82a7sgFZnK+OdrJ5ElZ42BnAaCD4WgOwCFX2o=,tag:lWiuvUiz8uwHX2x6OT7zIg==,type:float]",
"type": "ENC[AES256_GCM,data:Txl2IQj2,iv:KmsKF/qy6fuEirrHtJtoLZ2u6GZOzBaIWuwqW8Bpyro=,tag:vfkHGH0yfj3y1DEoDVe+MA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:zOMfbFqz5tI=,iv:982f5Dk4ysdUDktF2CEyXu4rRRAL11VluMF0YqbEFEg=,tag:95FM6caRQXYTgIs7iYzhDg==,type:str]",
"value": "ENC[AES256_GCM,data:K5by,iv:qaudWzSzafEual2KfsQMc318rHe2ZLw7itLtCm2Jmmo=,tag:oC35L+V6Ir7v06NVDK/MWg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:M3hAXNw=,iv:lKwlqBDlcNIcgALkZvULzBlB2sjFclN3dyEzZNKCRUM=,tag:/r2IVJI0XTlpR8O6ddpwmA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:+A==,iv:kGx8e/jjbaU4oDHsnWxvPR8+DBjba9CL2ECER5l/NLo=,tag:qoMf6Hov4IVEPCYebWnPnA==,type:float]",
"type": "ENC[AES256_GCM,data:B3f6aBiP,iv:TRbfO9vbRGT4/m2WATi0dnDX0LA36QQjS43ilwHdeRk=,tag:9CSvGxhsILeIYu0MgW6Iuw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:iLr9DzRlwJw=,iv:8rSOJq0gRUKtzDBAKoNTLB4fkIJOhHlt+/CoHnZEJpw=,tag:hlZu1gpVF4hMSPBo/TDKzQ==,type:str]",
"value": "ENC[AES256_GCM,data:KUaEFdfXiwaCCas=,iv:GWDMtcE8bTMS/BrBXOZMnoUfw0eRv0zMOpjondOkWkc=,tag:fAQl7dt/hYx6Qbldip0AEw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:GZQrgS47mWX1hD3z4d0x8EqGBGiEZ+HOiiCmjWe9hPS2iaPrUB8vaBlxaH1LkaDwapgSv0OviPhIts0i4fWWpFBb671s38PCQ5kZAExu2nfhs3wvDtlVPUEz6lhZ5Dz9rucL+enEeHGF+GOg15UsC4Ky9PVCYgKB,iv:mjA5HA/GNqhGNZketgBDbsldQqZethTADLR+ZOnjQDo=,tag:uxC0b9vo7FPXt9jX+GKRpw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:eUHULFTDsAAHbFq4rUpt/vng9B0nC/X9txnD64Xwqw==,iv:zspr3kNAgbAdA2kdGjgduUoigLn+4J8ujZE0D5h4aBk=,tag:r4QJWhDis514EJcDQvi5ag==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:6TnPfdyYE0VE5vV05xCt,iv:hBIg3FLoRqCGhuFu+fKGIMsWbYqjWICCyNVDXsl9Rz0=,tag:KlX87nwXulwJqHbJu/t0Ng==,type:str]",
"mode": "ENC[AES256_GCM,data:VxgwJQUk3A==,iv:6XgmGWGwQdZt4C3jnU6tJLxJoXFEnii0CMH+VB27P5s=,tag:CCvnn9bu89Jj35iHVPu0Tg==,type:str]",
"type": "ENC[AES256_GCM,data:EtBwsy3glbhN8HzX2rKjNO492Nvc7A19je4YuA==,iv:P85rKjbnCwvD5ZZbergnWKxuZCIMIcFTqyTa+ZiiTCk=,tag:jkfGJzLMLdBxCknGiJudrQ==,type:str]",
"name": "ENC[AES256_GCM,data:EwjU7A==,iv:4AFCX3wPyL9PzWDT6zWI/SNXG7MCp0eMIJOUmpC8nVo=,tag:XnsmItbKIjwLv/I625p2Ug==,type:str]",
"provider": "ENC[AES256_GCM,data:Sc4x+JX/zyzirVut7iO9bA2JqpelY2Peh2kIi7Yv7Zrq9PYe/P64pKMyKxqB8j1R1g0zIt8M,iv:hEvxvBn3BcXGVNJXS7b6UX7jd4TkWh4jAW/BC1a1gxI=,tag:ffZWHay7ibQP4wMBPb2nHw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:oA==,iv:MOEwAdVam4pbmP3tKtJNNopyTk6CXCyV/0yHAOVHSsg=,tag:x1hdfBaVO3sEZZPR2nJeVw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:3ugvWd24DNo67FogwaG8,iv:4mg2nAwQHl+ITeSMtiG4CQamwexIod8AlDK4lWomJhY=,tag:f16vnRQ9HABHUQQCu96t/Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:eg==,iv:yrzovLF1nZO0qmRjvljPPPFgFcuxpYe706N6sNSPOlE=,tag:LBxPJn19UnxyswxO+cdSmQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:zDF3HH99igkmH2ZAvO1H,iv:sH6ZOu6MZ2qJFn4ObyTNr0D3hHf5sFIsgIKdyAEHRWU=,tag:l6H4vXlYb2nmrvpO2+T9VA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:qYeS1xk7ngTS,iv:vxDBddRA+sTvwX2VQo6+wVl4otnQlBlHYjOdFodky68=,tag:DrbinDOqwweyj1lg39zsqQ==,type:str]",
"uid": "ENC[AES256_GCM,data:1mNaajDu6itLwfS5qJnYLZgRnEK/IdcRWwKvIt1qUlmI1BYF,iv:HGJJru7OD9KAGlIKXwo812xaYEQzMaBlaGFlfyV3Kfc=,tag:vCZd/ditQGqpHipmGiVgqg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"access_modes": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Kl7KEVhQwuZZFS3sfg==,iv:pe/hRumjK2LAv+wu2w/q+0qLYiR8nBEesegMZZ9im+k=,tag:coeQXkSPALPQPTS4lokquQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"capacity": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"storage": "ENC[AES256_GCM,data:9hAs1A==,iv:wkVOOhCMIB4ACaOlnNj/R/N9wtKf/9voUiaKpd3ekro=,tag:BKd+ZLhq39VlBrNN/usKmw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"claim_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:pq29fmcASq8Cr1oJfYL5,iv:IDas9jGinFhY8Mz2KykS86FWF7yeOJ2NYfIVhqoVOB4=,tag:I1cBzo6P2QQQtrmavgmbDg==,type:str]",
"namespace": "ENC[AES256_GCM,data:W7grSF8QZFOYSQ==,iv:qyZ+ilkKRO7x5UTml97ryhuyW17C+OBaHcvj6B0uVsI=,tag:D2avEwJ1tzRbLFzqv1OypA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"mount_options": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:VJM53SmBwlNd,iv:A6P7rOKZvoPo/Fq/5+YDVamKBx1/hed4oUSoEgug7ew=,tag:GL6ixpe4kcu/A2JFWAN4RQ==,type:str]",
"ENC[AES256_GCM,data:cXWfo7b7V2s+,iv:wDFWRs9Fi2YODvaslUhqVU6FZs2N23cDQ+CY4tD1MY0=,tag:JQCdV0NTIeseFZW88SS1VA==,type:str]",
"ENC[AES256_GCM,data:Cais6Q==,iv:beh5giDfWyBBw10g3u79cDJgTtr6FzBb22LnPfQHNX4=,tag:h6wYuN0w0PscbsSgSsyPwA==,type:str]",
"ENC[AES256_GCM,data:48DnKLjuNzk=,iv:nw5vig75sxN9lVKUkVX2lGAbZOIj2QIfYXpIjiVKkCA=,tag:mx/k7xf1bPJwUq5WiOGDSg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"node_affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"persistent_volume_reclaim_policy": "ENC[AES256_GCM,data:pilRWl2x,iv:GVWr4IXw6L4LBooIJt6fq9ZtklaI7wY6+kMH95D5SSw=,tag:sRsNpvqb2wd7OhLKlfnfRg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"persistent_volume_source": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"csi": [
{
"controller_expand_secret_ref": [],
"controller_publish_secret_ref": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"driver": "ENC[AES256_GCM,data:fBDv0tZRX8YoXvoc8bA=,iv:fb0NX2FQkV6QHs0xnhXFJvuvUhyhh65OyrBC+qrhGBo=,tag:k1rFCiWDbGz9DuYINJ08qA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"fs_type": "",
"node_publish_secret_ref": [],
"node_stage_secret_ref": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"read_only": "ENC[AES256_GCM,data:fCICFms=,iv:WRqZmZ4OSIWTHIa6rho0FLhuo+2E49nZ3Z7+ZsNnYXA=,tag:fhBIB34S5rrMHoCXSN3Rmw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"server": "ENC[AES256_GCM,data:NoY/A9cDS4M3eA==,iv:UmSCAzsx6Q0NckhCOInnHKoYaQD/PNLq5AKh3a/RRHs=,tag:eyFHs3aWB4LWonVhKja9Qw==,type:str]",
"share": "ENC[AES256_GCM,data:wMiUKkFBdFpy8kHBlzgn2kKGDjU=,iv:stvUhbdjohstLa7euQuNfyHiuz9DLDcCTz0DoeKWA3M=,tag:1ngbjrmFm/N3qoxWmpmnOQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"volume_handle": "ENC[AES256_GCM,data:xZjf2wwHrQt6HhAgDE6U,iv:F87IQw8LoAN3wDTlrZycFvqDAkfS7sAXzKq12/mgIZQ=,tag:N2lUPaZHVEFj/5OF6V4Yqw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
"nfs": [],
"photon_persistent_disk": [],
"quobyte": [],
"rbd": [],
"vsphere_volume": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"storage_class_name": "ENC[AES256_GCM,data:GLp9WHtnM02SHQQ=,iv:1MNQqKs2bg0ZubZwunDbX9WWE63EnF8ietc3pBJ5ygE=,tag:sObs0MXksopBoCf2r7nhAQ==,type:str]",
"volume_mode": "ENC[AES256_GCM,data:BKND37JHxflEmQ==,iv:GK1YLl/wMTBtRPQPuCJ2HDmLe39a3uCfrFRTekOXEo4=,tag:ZzB0ZQHGHl1AlnHchrcSRA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:tun7OviYY3KfHQNZAxgUM791fCtDACtlrlANuuy3bXZvJejOMItXAP0gpYKpJExekqX5ZcT0/2Mb09aDvOvBZk+SNyzfet4qzJn32iKVAyczmnb96Ivdrg==,iv:QSMF2fAkp5eb778Qdi2rUA6bTbiZ8xsjrih6JbyUyZI=,tag:IIMWehS2NWBg9ZxrlPgaog==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:fBRob4+xZUkmcQNQVxjl,iv:xIUlBhy1ksbxUzGEy7FnGoAWNLAU/TSubil2Y5ND6js=,tag:OfrGX6psbmefuHn2FrpM9Q==,type:str]",
"mode": "ENC[AES256_GCM,data:Ub90Ej6iQg==,iv:bRP3dIVWxs1Jizfu/FeC+A3t7GS4tj44X5cyok/Urmg=,tag:3bkGBDAr/iDwxIBkqgZiEg==,type:str]",
"type": "ENC[AES256_GCM,data:bqiGDOC3uGC0SPrt3kPginDbZqUzk/cZL7yBvHYWI318sQ==,iv:w96IbFgontBKAcRRokx9QXUeA4wzxVhY5h1TPA/6uR0=,tag:5JAhFKhxR5Qki+elypFbsA==,type:str]",
"name": "ENC[AES256_GCM,data:fiI/mg==,iv:JoX3QVcRbL4IlN8tiqh3aJSpISY2hGa0T9+4T0a14vo=,tag:hImxDhar8ZhKsMmUtUKmbw==,type:str]",
"provider": "ENC[AES256_GCM,data:SOd9WKlbSCAVAxLXGCesaIfDdHO0v2YUyUaupW2jBmGP59eUV2HLwwAopTiRhgq6MGLcz1Vr,iv:BFkEfkEE8JgO9uoutkI46O1OUm+FO4dLuj1q1aesDwg=,tag:bHWrOCqYzwwCxBXvVFDHmQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:TQ==,iv:t3mNbjBkV/kdWvwD/juh7P2r1XZI0f447yTOFwYJtAk=,tag:ItVFyd7cWUqSGfFG2lgK0A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:0XPY2F15pNCp9RckqsCTzLPmCbItKuolsMA=,iv:mWJe39eeLRZoFA54VxrdJrb1plW1bCsGgymTQjftqbw=,tag:TXZbTkkT0pWSQJOinBKMww==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:gQ==,iv:3dNWY6jbp/fV4vdLrf9TMpNqRuxVwcP07OaL1LEu1+o=,tag:o+YfkCjM++6+vkzxROAzQw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:DYu9z10EBhr2Dzsu9u6t,iv:535ARReMGJr9RN7bHxwfLG5phikKPcuXkzupCjL40JE=,tag:bCc8Nx/lIwSBb8/yp7DZfA==,type:str]",
"namespace": "ENC[AES256_GCM,data:y92AGQfFZ4xq6w==,iv:9phLoBP7F3QXFz7wXy9ITLoX+2/CCd+92DKfE46BW24=,tag:6g/KziX82OtanPrdRXbWaQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:E9P71Vx0B20k,iv:2SuktcN+CeJXtGk+ifum//86Y/0nSgP22B+jk6ApAOA=,tag:xIHY22QwTd6fE7Dby8dehg==,type:str]",
"uid": "ENC[AES256_GCM,data:DoBc+/GX7qe0MG3rBICyNGvjYMCBNAgJNBgOIHwOvdor+hUv,iv:KrSMKk3q4DSKPJJHxFgBBqfxC2HpU3fMVRDFhTaGwks=,tag:2JN2bB6tNtOwCmGkfJw0tA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"access_modes": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:74wtzEFxb4EPSomxYQ==,iv:ykqSIYQy0V09vQ4Ynb3XhHrwWalWN9wPmvtExS1bvE0=,tag:eTUyjBj2mJvSyRzpIwjfWw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"resources": [
{
"limits": {},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"storage": "ENC[AES256_GCM,data:s09OsQ==,iv:pHw24ChVsihFCw4EH+kJ9UoTHtoySj6qpgKlDONvCVg=,tag:WiIvPhZdePu0WBtb9LQYlg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"selector": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"storage_class_name": "ENC[AES256_GCM,data:z/O35bfrsfa+Vnw=,iv:oP9Vkbi03IH7Ke/RYgaQ+kfal7KAJuxLP/nM1fxXEfA=,tag:cjYQAnDeSDJQofS90zUeNQ==,type:str]",
"volume_mode": "ENC[AES256_GCM,data:5E1ILc8ZFVuQVw==,iv:Xo06AaUk1AG3QE6L+5e3wQOHh+ysreA0MXTQoHUFEUM=,tag:RcOLhUQnki3jlZnaMAk5yw==,type:str]",
"volume_name": "ENC[AES256_GCM,data:+/hxYPOGIhVwm7oh2jFY,iv:fUzfZyviaWFP0KFHYZeOLsvi/eu9RV4qz1ntNnwQMKo=,tag:VoWlSQhstDhWrNHu5Y/GlQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_until_bound": "ENC[AES256_GCM,data:WtOGLQ==,iv:H7hpAS5qpyBK/JNNaAdwPQE0NsLtkLSeUWTeswBI2eo=,tag:Rz4dlwR9CSUT8yD0zXy6AQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:YnPDMMh1cJrC8JxDAgTs4LMM3AYYFum8xGfWNKm86Qd4vMitUV9CEbKUrTcDKb9Db5eKMiExsc/hk78ZaEI8bmtjAs28EwwijN5D257IZumnarFTJnM44w==,iv:S5PMEg/U+b0t9Ja5yebXktkmHHQYWGwIUZE18XYLM7c=,tag:1qAbQ7B/PenqsrlltOLLlg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:iDTLsemS28mky46VBQRYY+OxSckavD3c7b4yZGObVg==,iv:P/IW2SdWkoBIn50Lp3k99hQt7RWCgZgjZ5VXwYky9HQ=,tag:3qKKWmWj55T86P/bpBFGBA==,type:str]",
"ENC[AES256_GCM,data:zAKNWGRWCBKooePxCrJCo4FtUKqulWARaX4i0ahL6MiR2IbgEL8YFTWj1EyxK/s2cw==,iv:1LCsivdSkCZVKXElf71JX4jAq306NwBYBdmy4NDqBfE=,tag:kBKalBb1/fRkP9NaD0Jf2w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:apHKRtsueumQG+BV11XWus8=,iv:JX/Bn9KCqgpKtKKBbSNcO6WHQphBXKElW37CW+s7ZoA=,tag:ZsQCML8IxHkAklBt3vzltQ==,type:str]",
"mode": "ENC[AES256_GCM,data:J2bGW3TbMQ==,iv:eAJ9pTTQT0hhAGRr4vrlGJjWgDrQT0Iy1w9tu0ruBoM=,tag:kZNYSc46SmlOuZCWBcebnA==,type:str]",
"type": "ENC[AES256_GCM,data:igZ7iA/Gq3EVKCAcMoMTOYs=,iv:NGm12e67eqhlwEw1TNEjq36+y2lPEkndFNEjzW56rYI=,tag:89l2UkdpxIa6XltdFQQZIw==,type:str]",
"name": "ENC[AES256_GCM,data:+qjprRwqpfWakA==,iv:Z7FkXziJJBBIJlqCxgcsY1A0RCVUKGKv/wPlZcKg8Bg=,tag:8rvnu1SNgjeIIDzpuo/xgg==,type:str]",
"provider": "ENC[AES256_GCM,data:934SpZGX8ey6sH+AY6f1kbNL8xRZGQZdQL0ZtnruQ7sITvPvZkunU+D4rqfIIRbnz/7jwSVK,iv:B0X67Haw3aP7eR3QS8XWqpT+E1LpRt37FIOz4c3pSZ4=,tag:amu0cN7ZKbFC0PSdECvpyw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:BA==,iv:9WCJaTH3SboLsFNBCvvOaJm/vC2TNYhGlQj++nCVUi0=,tag:qJ0SLxMKspoTe5akgnmvRA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:uz5KJ0sQPN1WP4iFQY7twN0ymvGfZubVV8gG4sRGzyA=,tag:mZIeOWELGZpLq3ukuIBJwA==,type:str]",
"tls.key": "ENC[AES256_GCM,data:eF09i0IOfoNhD1dblR1/1NOFbeysGEbydSqdwvqEAn+OxNlxqJkOqBXttukt0ka0nwYWEz36SMmGvbVY3VvohfoIATKr9JxF8UaJlh1BKNFpVmn3/30epdY3wRvqv7t2UGGklp3ye6GUp57R488+DabT4ygFcU1P7/ioHjoenupHjK2uXl1ojynx8BhcC07DNgcokweJuZaQS5OBohkRAE/gs4XINxX2ht6fUPhRWowayYZMYuITcjIJl1bQITrIb9iYrW1rGxk5hQkYDEbVFHRpUnuMMcAkrgcTWX2sRABNX0tF+DniStO3Ad0iv/GOpw==,iv:WILARtn1kuE1tHv5MdrkZoMOfM+azDqNN+8r5IUrLZE=,tag:olGamxHr4nhoeiq3+tN0bg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:rtCGp2CX6MWsBAWu+iElrv/5evEa,iv:ZijUZTbPmd5I4Qw+rko5U1TgUhJJn2He81uvM9IXB94=,tag:WxRW5XRU0rBz5w7JAefjDQ==,type:str]",
"immutable": "ENC[AES256_GCM,data:+gSnKzI=,iv:RIAiKJ7rureJvCUxzms09iMi6fXtR5Z0WZPXcaDlS4Y=,tag:hhpldQxft6BAjDzJrjFIfA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Ng==,iv:N5rNv/0K/as1SDUun4aEVVf8CTplDHeVTB5JrZuVVqU=,tag:2zwZUBVYGX0J1/CzMAvIhg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:YdRjQaOTwuUc3g==,iv:HFeHnu4WSIehduunbRarLCQqrEY+J7xhcdTA3up7uzo=,tag:g3FevtKuJ3lYBVRW77pIag==,type:str]",
"namespace": "ENC[AES256_GCM,data:Ztl6E0zJ5tPEBg==,iv:fl6KUK7GLchRWUgXgrING/G3Frptm+R4nikURRO3DBc=,tag:mZdvjwyDizagdllpWFCy6A==,type:str]",
"resource_version": "ENC[AES256_GCM,data:Z23Q3mcYbM/I,iv:796jEtdz9v/oabavPmbRR7If77/wzih+R6hHL8HH1RI=,tag:hksanH7riIWzJXbWYjfI9g==,type:str]",
"uid": "ENC[AES256_GCM,data:s4wviQSzCTichd2av5bNb4H7Id/XyFCEkZzbH+7LSauGTi5Y,iv:Ra9c4fJieU3aImWG7zsreyxdggSHGcdR5GjaY9G/MeY=,tag:1l4cZqcEIaCKFP0/IZI7RA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:0nEynR1ezdw3qOnDNg/ff5Y=,iv:0jcVeST/izjNWCmFoohOWEqMvgMRChlz7UCzxUWT7s4=,tag:UZlYZ/ey+3Q0+9Vlv5ei3g==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:wF8njQ==,iv:UzwCtX9Lx2mf6Rf6W0NK5dPkuitPh99vMZIsHMnEOKM=,tag:WssYFrKe/t/KnqEG6zXB9A==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:BxgINjxOQZM=,iv:v67vxY/BhFOl6hqMODvDQkt1u219J+oOzN33WAe+Waw=,tag:kf6+SjjlM8QvK71ENz8Cwg==,type:str]",
"value": "ENC[AES256_GCM,data:Uljt0TC/qjE=,iv:E/UP+uf/cdcrCVMfEfN0WGcyoHnT7z3xj/K1MBWBoiE=,tag:IKGuudJdKWZR5A0rUq5qKA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:pcb/Ho4=,iv:5EwszAdvv9gAiYUq8nnfN+nXiZqTWrBTE356KR3CjrE=,tag:gcyK7oBy5yjDpe1GwkJS6Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:NA==,iv:GQa/Qkbjp0GJOpptyRPdd6PY2urJK4mzFxLzLk995D8=,tag:mjAp9lvVkRieAqo2j+sGqQ==,type:float]",
"type": "ENC[AES256_GCM,data:Y7IO1QNb,iv:NFTQsW8/vZMgof7UB24fjKaiVDkU69qZIpR7llGS7ps=,tag:PWOGNFMt0XllwKdZ7YEZkA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:Ku6j/l4ZWkY=,iv:sShUOpshiITKPFcOhg3FM4ewrTDaYJyf4qOUMc9edw8=,tag:mVKnSEMtcDq9StMvQ88Tdg==,type:str]",
"value": "ENC[AES256_GCM,data:LMuOww==,iv:ga/JUcV5Ukx7OEL7b5yCqQI/U7FynvEIs+ZzyZLuww8=,tag:CPxJqqIG5B4DzHrGtAqB4w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:dD8JJuBu1vIZegRsyo3CbtEU9JQFNvzRPWkT7dytIxwrKhb8bcB2tJE41xfos/Na3r3Pee300nNIC8sKF6Dc2doHkxLeZ8ZsI4So7GohXIwhYrEk,iv:bOT7jr55G05Of4ClNemxLdg/0ioYPfGk5rCeO3luLiM=,tag:Dm5+wtLDmQdepXtftU8dAA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:mWuuMrAc2OOsk9ZjyaleK3VxTflulHxfGuhpsR4jXg==,iv:11JiaMpeuHL/SQmGY+YoRp32IFnyhVYJSM/LsHABPnU=,tag:Aa7+CQKS21aB2KqPv/a6mg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:12Z",
"enc": "vault:v1:hWE2aHTP5YGj9QpxOmoUCk50XexmZiv93mtkuz9zPgkAhKKL7VW5DgL4sDsai6pfcypYrwqooyOGk/MT"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRNmF6ZGJuWCs3Zitycmsy\nRFRuTCtzenFSVkZoNE4xc1RhYUhHOFVJWTN3CmZsTVBJVWp6ckg5UWZnZTBlS2g5\nZ0VYZnVad2FhN3QzZVc1N2luR1lTN0UKLS0tIGJVVGF3amlwQTB0TE8rNlZNc094\nWU4ySDVQaFFhODl1YW1HVzhlVmRya1kK4QXVtci3+roJdt5Vw9LyoteDVyFYkU3a\nClBORiBRr2Z7zTvDolAwp3D2SbglIRCbU4XbCNvql0hm9wfKyUfTSA==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYR2IxdjIwNU54S0VmTDBl\nU2MxUGh6VGRFWWZRRmNpdVFUWkZabUVUdXh3Ckl6L1lFdFcvVUlNVCtmMmZuWWtU\nNkdGWmpjanlSV3dJZ080Tnd1UlplK1UKLS0tIElhYjhPakN0NmFzZmZDM21Zcmho\nK2lWTzZBaTVtdzB2TVpOcEhmM0F0M00Kb99rzLHN5nJdLo1cimBkZVMtWnLP3jdd\nSciehwrw4N3Iv0TXoBXxsLGHzPvdx0esiy3VG65sEn4KhPGDvXkkbw==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:12Z",
"mac": "ENC[AES256_GCM,data:yQqEw3E5R0jD0NvFGmm0skr5qQ+8BCD7xozFYKrQIFMU77buPzs3KiMBxgvDEf56UpzewO0b+PRPCU5ZyjVHFJRm/6hzKV3ibBQOf6ElxdbURIMBC+qyaYnS7y9pqSoafn1qNTg4PzgBAVFQYiYP1cNs04+6+Dkoxn4Y8GJYVOk=,iv:gr7Og/YgvxYCSAytbMvQAIS507RukpQYuPTPjXwdumE=,tag:osWv4V1uJz3iH+6s7OUZwA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink