viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
infra/state/stacks/tuya-bridge/terraform.tfstate.enc

1045 lines
71 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:bw==,iv:xERWVYL75cSdFttD+18llcSS+1etJLByPvglEjOgUtQ=,tag:hoY3BIZjfdnPPbPjZxoobg==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:+UTrkrw=,iv:DtrG0fN/TNR6d/rBOu7Mp68lzZrNzuRL0hK+cXhsAD8=,tag:XMfjc/Mg/mLYg+Z7Cre7Fw==,type:str]",
"serial": "ENC[AES256_GCM,data:ULs=,iv:g9cdtwN23v1fGqk3PHkssIT7xAaiqJYL19fS3aLfKhA=,tag:dlCg1CH7RKF0bna7w4CiBg==,type:float]",
"lineage": "ENC[AES256_GCM,data:m3eq/IV3/IfX4L+f6mwXVQCeZet6tsPBtP7JWeKPLk8URUGt,iv:GdFrNhmOwUnp1vYNmvt4wcjNIE83o1CdH76sCnIlOxE=,tag:lgGDi29xe4PWaoBCZvtJ1g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:KM/rxZ6U+g==,iv:+Xm2wGTQUkYPNfsOoW5/a5LcU5IAGvIAdbbG270IEZw=,tag:8Y6LnzsjJGKuiRsBOLy0WQ==,type:str]",
"type": "ENC[AES256_GCM,data:mfdTNt4ldSGwt0nILy3+9Mlww1fF,iv:TFcS6WyMK1IRq0dnjVdh4X2w77OlftEct6TDidaJarY=,tag:5PBTmY+KsXQzRLWDg5DzVQ==,type:str]",
"name": "ENC[AES256_GCM,data:EOXxW0A5+sBlcJA=,iv:bFyCXNueQc93Aj20q+m/edUmSkc8G4YCGnzLCAu9q5w=,tag:I2ifpLuiI0ImdCOMi79P1Q==,type:str]",
"provider": "ENC[AES256_GCM,data:opnI3q5e0r73wvouRFg2s6ydkLfAfit9BGz7vUN6ob5fQIstC5Lap+fsKXikYr3WV5dR0JBu,iv:2kQTLhK63MDdceFBqq1zjmtOlHfvDdieCE0ifstIM7s=,tag:dGjXrErRbce7ArM1aDupUw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:cg==,iv:qY49TvklAenxmkK877M0JwMoAjygsnWmU1thX+I2wvk=,tag:HqeiV5drqJ42U0UR//tRwA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:iGoQ5LEpK0kCL4JhJOo7KZWGFSk7KYE=,iv:m+0OCwhfbmsbFjDu9IIwkD8zC3KJJyme4OMOE8n/3hk=,tag:ZpJiuCitnylMh/C3pyAXdQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/auto": "ENC[AES256_GCM,data:JYu4jg==,iv:xHbc7welyfAENKQz1+YlnAjv8iXrM5p1gaU5InUx+do=,tag:Z2xPSpO97wRSiEocv2AAfA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:S+o=,iv:PCxwB7kePPRYvggiF+xHEElv+9Vof9v6lnj/FqArqGc=,tag:hrzBizVRGRS0IfN2Oa1IcA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:4nueCl/YHtHfkfo=,iv:KDj+VQJLgH3kaV/Aue4J1V273AUp/b8kNbntzbpY8Fo=,tag:5Vq8R47WRCh0rdomV4DYAw==,type:str]",
"tier": "ENC[AES256_GCM,data:ithc8tUsSrzs,iv:AxO87xfvCC1Tp4NvuqH+Pncms/RqAh733eVuSOmG0kA=,tag:OUZUBVaEvdPEuXBS4k6i/A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:zMxuzuDsdc9bCiU=,iv:IULS1jdK5as8q6+FYfCzwIkxBSjJMlv6ytC2qNTv6w4=,tag:tXZbvvc4QorIs1btBWzjcg==,type:str]",
"namespace": "ENC[AES256_GCM,data:f57D1HuVNQ/6Nj4=,iv:1bOIqPCD9XZYUaN82f3BQYU06kaqRcLCkafVudVQRu8=,tag:bK5fpj7FOj1w8PU9xleAYQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:wqGV+R3GBuNo,iv:ixzR+3zBb5FNNlQf1h5Urq4zB3BupXqNDXFMBM8bmBU=,tag:wsrV3xn2/masPxblFZIQgQ==,type:str]",
"uid": "ENC[AES256_GCM,data:9tW4Cx06Ol8+SGPeN6BCM51SlXFgpej670ytQ+lJgHxhT4Q/,iv:IT1AxIZgc23WPsQDPyvpOjpT3K/O1TiuVpY4lY5/MJ8=,tag:SofPuEkXh12oCnuNVXvWtw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:sg==,iv:9NXPVryS2vTbTVa9Ltog6A+KFbedItB6nCuuFeXmr9A=,tag:TwZt4zuEqLBCIF4iCBFvrw==,type:float]",
"paused": "ENC[AES256_GCM,data:WhMffsk=,iv:ehlgjwa3r8jF5httnXTdtUqEZ5AOCvGus5PE3FauTuQ=,tag:+HAvZ1X/bxNwCxi2B35iQw==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:8m8P,iv:oti/8lBs4tOwugm1rWYyutflr+HHQDv8aNlYr3LEATg=,tag:hzLJgknG0FTiF0SZocwivw==,type:float]",
"replicas": "ENC[AES256_GCM,data:7g==,iv:uPVc9Oh8zHIOncwRXkq2DxFu/wacF7T7/lRedVf6OJg=,tag:usa1Njhs8VkukOga9q9MsQ==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:QPk=,iv:Hr/8MQViG/K3/at5X7hoJR27+bv1EhhmIZEfsckCWUU=,tag:EB+oJ2rqolTwwCXthuOo0w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:CmbhRpFHPsbhf8Y=,iv:cFXa3/7DQN4SxjW4LcxCBfFxhmWrRQsq9Y/JZ77dC5s=,tag:4n84SddL6xQOoXb0bPmKKw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:8moe,iv:WUJfWhWPAszxYnMPJ2RE6owt5Dyo5LpW3XjZ/5MWffY=,tag:Wpy/r1rqqaGwpPWHKo2fTw==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:af6A,iv:icxPpApnrT8CBy6Tq7nTa3yQ2Nxmw3JpygGu6qUDFIs=,tag:bmtvdN/s/CJ59m3kR0lD8g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:/khY8TzTMZnNR3DeEA==,iv:+Og2XZ9zyf1RBHAbASfn2s8yt/OUlPtUF4/gL0eW0C0=,tag:1z2t9qpJMq+kTEGkm1xj7w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Qg==,iv:x0A0goiOXOTvzZKcVSQs+uHxr4O6FKU0qA0OKD8R6sY=,tag:kTfnNGcCUHmZwypTE+x3uA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:TAgRStfNVSRZaZY=,iv:/FhxFvm/S98wvMH68ediCIo/s1cnLRub3oZ6R7OiyzM=,tag:VElWb+5phZgxkch/WRT/ZA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:gQ==,iv:+olnDGd1GkUDiwoS9DojujwqH85f2FkVMyN2ott3w/I=,tag:wZ27pqfQtfFlW/pmrk6wvg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:3onDDw==,iv:P1A+kJRYRkKfPkN2SnqSKpPvqHOhQM3TYXIIu6htXag=,tag:I5dNyBBf4hx1ZdSisrGGSg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [],
"env": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Xnn/JZVjk+XQOqCTQAVg1Q==,iv:QQUNLmEN1m+hA59lNuyToca9h8h7T4b9Cu6AXdwnqW0=,tag:eFvDt3J9Q87X2DVYw/GC+g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": "",
"value_from": [
{
"config_map_key_ref": [],
"field_ref": [],
"resource_field_ref": [],
"secret_key_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:yTjn/jjW8g==,iv:M4zf1vedXY+lE7tegEAXbyO/w6BOb2SlZRbzJmUJD2o=,tag:8c8OvTcURymv3iL+mUzHwg==,type:str]",
"name": "ENC[AES256_GCM,data:s+D5xMgcmVEHQKXLWBbD1XE1rQ==,iv:YBqVB/uP7lR+UbmFTdzGVuQcIr8+J8NW2ziEdIkyN+w=,tag:qhHovcZx2OF23H1e/k9j2A==,type:str]",
"optional": "ENC[AES256_GCM,data:zeQuK5Q=,iv:lv46ao4rJ7q1lwnrvEb5jCpr1Skb4YmziObDW7Ls6l4=,tag:LsOikz3l6w3cKRkIHm4XLQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:VNug5nZUkYGtb9S09k27IB1vHA==,iv:2TqZJEA9j1n/Dp/Z/M65osSKxBqSs/xK7wpVjRrXItk=,tag:xYUJPbn5hit/7EZKVpmpbw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": "",
"value_from": [
{
"config_map_key_ref": [],
"field_ref": [],
"resource_field_ref": [],
"secret_key_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:ratgMHSVPcpRJw==,iv:x6J/G/5QpfPrp1YR5Rl8bi+0/3+rHyHu0ZWs5dHx0N8=,tag:EVtv4lH7dGr305ElVYhs5g==,type:str]",
"name": "ENC[AES256_GCM,data:3So1dVlBFy8/unHx3AcynXSBzQ==,iv:leNpQrd9imxAlGPh5v1YPY2GxTV0HSlJVeJxVhQARYs=,tag:KQTpJnaIkKTqlITsUwXSQA==,type:str]",
"optional": "ENC[AES256_GCM,data:N//J3rw=,iv:fjw04kpEAc5n4mTa9DhYv7OBOh73U+Kf0ebgCS62LM8=,tag:T9QEEzoRWQGwvu8BNl9C9w==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:pgElu014VtMHCxF08CFg,iv:8+qKxAhTC2+NFiKzD1UIbIQay4ElTT9y2FpZQHJCBAs=,tag:ypbHrgp+g7ZtkEXeCr8wtQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": "",
"value_from": [
{
"config_map_key_ref": [],
"field_ref": [],
"resource_field_ref": [],
"secret_key_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:UEV3qd04nvGdET9CD3g=,iv:+fS25rdHglj1zuXq2ehoZI4n/FGRHlAQZqUbiSLK3L0=,tag:uwR0plu0dR5bF90eVzPVDA==,type:str]",
"name": "ENC[AES256_GCM,data:Em5Ml4bGXi+pXhmvu9gI0YhFlA==,iv:PtYuQpidU8Se5sGnUmjtY7x6w0tHd5E297Y8SLsSi6A=,tag:yv3/OSFrh66R0bniYDw0MA==,type:str]",
"optional": "ENC[AES256_GCM,data:6C0J7iw=,iv:rae9+9vEOQlfcp5ea0MTEybdOfkXPNVUPTjeWCHRH9A=,tag:D2JvgLzYgmBf+Bjlt5xm6w==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:nyYQ1RcyTM/0,iv:XtkeeIusy/AbZMu7ivF+JqDRFAIPJ1WFpSdVO1KuXcA=,tag:igzeeOw5gJpoLFTDTAm7eQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": "",
"value_from": [
{
"config_map_key_ref": [],
"field_ref": [],
"resource_field_ref": [],
"secret_key_ref": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:ynQgBdrwQhKw,iv:6D2nK3VLvsf3edwTyUpLI+2lF26BSZ5t6nKolFeSXoE=,tag:wT55CCWowsot7TjiBy0/PA==,type:str]",
"name": "ENC[AES256_GCM,data:fBdEtXkgXQttb51eD9dPvFSigQ==,iv:leYuZS0qWsTzSDXzKhxM3JDgtvRSjJGFBeiQAmHgKuY=,tag:hyK7yt+iG//CvWQkIh+vhg==,type:str]",
"optional": "ENC[AES256_GCM,data:UWpNoFQ=,iv:Gn7BJSSZ1akR2v1OCfs1F/KoYV501zBvEJ0KOxxDS+s=,tag:HUhMUkcU6nmc/Z3SI3jo4A==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:U3OGzQuLOSZJQEftANxkR4dHPYnthL4UnzNEIkFOkw==,iv:FUf4OSthuJmCh5+ldSUwRLbnOVDJdEn/Zf/Ua7ZeVGg=,tag:+VJUZSJp16rXO6ncL/qsxQ==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:hVanulAK,iv:wYQUBB7wiiVzm6+pyTiChFrvqKeu51/AWUjsC1ddZJo=,tag:EHHZKT4QJhU8M+SwLsXPIQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:EA00/0eSlbRb74U=,iv:1mzu8ptdieAtx/nrRT7JzmQYXec7aJVCtqF12sBpNL4=,tag:v/MlVCHjgEniCpRsvpgaFw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:O/yuPw==,iv:Wpb+/ETN5qVzKCdJ1CyzeJ90KUzOan4dfbguikgz+T4=,tag:wxLhUVMy24qwqzBW8xqR4A==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:pw==,iv:/FQueQjAcvY6mW+dS5eiAsaj91Fg7y/xhoz3zZnCGrY=,tag:JYl6BXtpPdJ9lHValzKmeQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:fgMj,iv:1VaqAO9Gjth9JL2FmzfHkbRfTnawymUO0V+EJ1tI5lc=,tag:mMiBVpfJLtHHLDYN4eZ99Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:MJIJKgA=,iv:o+F2UKTwqf6I+CpfeWTzKCjh9LpaXclFmPqLmzOLjMc=,tag:/mF0B83yWrFQCkxQTfUIsg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:7PIU,iv:rWswtFQuCSItLPDdJGyHRs1yEQ7Xd9dSC+G51jZ+/pQ=,tag:seAqX8C76C3G250tOH8z8g==,type:str]",
"memory": "ENC[AES256_GCM,data:EKduRiY=,iv:0T5LMJ1/fqTP7vrJ90Zn1iarF4zjG9l7Q3z4gnyXoLY=,tag:EcSCPEj4ukM1mnmRbVfPZQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:kLTjW9M=,iv:aEXy5mr+1yn/2Tr2ChknCA5G0yR3KFNNXagO8KkyM9M=,tag:BF8e6jGC/5zAQvxkqr/auQ==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:f4YKbqY=,iv:qWIdnzmo/R6Hgxchu+DBNiAO5d44map/p2doWroiiUU=,tag:FFi5SSbJZKTKUiAGwjXNzQ==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:opmoXQrTFjsG9HZB1SKRd05agr0=,iv:G12qgBRRQWki7bneEnbVtfkISEfftu/7C4ERCx6J4sI=,tag:G+oS9Yhteu5HKiahDafrQw==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:Ix5yDQ==,iv:p/nIiurqqlX9rZ5IYQ3xuulicX1CF8xjb0vJuEqvsPk=,tag:PNYE6yPfS+BO8YfcrDRkEg==,type:str]",
"tty": "ENC[AES256_GCM,data:VydhwAs=,iv:QYAcqWJpNqWoLgtNZrqIHKA+W8Prmg1JvVf+8LacZo4=,tag:62IoLemX6Oa2OHmVzk7U3g==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+ry4E9w=,iv:boSbrZpnTJKIkPBYVx0XW720tY2dpPnSWb7RX0tDiEk=,tag:MzrnoJM8FzfGxt4wFkmJqw==,type:str]",
"value": "ENC[AES256_GCM,data:xg==,iv:YxO3JPRSeC22vHLgroWeEA35stA+voglgokDyCVJnRs=,tag:DMvnZXYtJyjHx1yQXnnt+Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:XkQnk3BNSADjMVo4,iv:VBvg8zoBDSHbk+EFxaewn2s2ZJ1S3TEmJOaq2BDCbd4=,tag:SMP5oFnhBx4glHF5vG4E+Q==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:AjvCFg==,iv:1zeieraYcSKzqFtxyMNDnSWrzLXqfjeUbdQQX7DWtzY=,tag:dQ9tPMNjwj5Fh1Ntd8mmzA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:fopOEWg=,iv:GrximLXU8dZXeXP/f//jj8AIC9Use8JzysTe6CrlSQA=,tag:PCSHKi+84M/t165oJk2ACQ==,type:bool]",
"host_network": "ENC[AES256_GCM,data:YYVf68A=,iv:k/tl+mzJ422cv3DhsgSAQZOya9h9W9B28x2d6UyenvU=,tag:pc6b6Rn4PcGCDLBfVoG6Zg==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:Iz2JboY=,iv:o3KDe2824E5rKf3NEDqv38isnjr36jJfUzva6iQ2aKw=,tag:BhnRYlgRNMtJaliajMvNTA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:xwjvcb7Q,iv:gBxR7QHkD9lU5pSsoDWaRDhQPoJhsOzkS7Xs+oTrWoA=,tag:uBnF5wno27OMHv1eHy/mSw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:48ga2pr0lb5RL7CwLUegBMo=,iv:nWyEis5uZoHClqW08Gv+LtKwwqm/nRPYfI+YClp9UrE=,tag:hTvHxAAkHUG6ELEwI1wimQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:Vv1fCa8=,iv:IbxnV2qgF+1tWXjQGVxxCBZYcZYh4YHTOb8xeBiqVJs=,tag:LbxMmI6rNLxpxBT8EV+hqw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:87A=,iv:CgON3cZfXaIaU+l94WhYcL79yBn//IKfZwQmYYONaYU=,tag:0M4lHmfOa3zzVA9+5y65WA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": []
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:EJcEeA==,iv:DbAL7HbCF7kaCX1+4SqrtG0tah7PEChgX4v/poPQzQo=,tag:bgOu92URtfOxI6+a22u2QQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:hn+XmFIGwrt7pPyPJ6D1+gpG3A58mvP8qnuldLqdu+uJS9pTvvXAwTWuwwCLY8WYo/EPN/kX3IV0u3IMS5+M84zacaD9LagyWTwyPeXzO5x2MjMoBhkq+6i7VmqOQl06IWLLLxw3/0oNauXY82DDB+tew5bRZRxd/Gr+8jgSoM7WZfDmB9kkwjqhqo0CJDpq+EwmANd3C6N5eewQo3ALihYm+/ZMlYKGKBRPdA==,iv:3Fh3P/Uki3dtKkdHCTYFyf8iCckCg7PeY/dO0HE78+4=,tag:ehQmR1vW/tJ1T/KOQxD71g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:X/AdjdH+fgdp09pRrWaToJuZF/MVXVT4RuFHIemjISI=,iv:cxRYn0+F1TqndqukkttRx5mG0OB05h9BPYSL3H3asno=,tag:yYawUt+XGpVxJOPpaXt/1A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:pgbaDGx9hQ==,iv:DQ0GV6TWmXHQ+O8yWsrz6r4Apd8fWUVIXAbH0V14P+k=,tag:ayjBOR54feSm8DZVQV3ikA==,type:str]",
"type": "ENC[AES256_GCM,data:EuGATyd3uPPVhTqgti6XOYwdaw==,iv:m1PuN7MgLpz4deQVFDC3XCdP2yRHBmvoOFbFRTDOtTc=,tag:9rlPOJEXFTifRvZvZdUZTA==,type:str]",
"name": "ENC[AES256_GCM,data:xOKbZA4GyO7Qgwk6BFpp,iv:DGAqIrw4IkRweMdj8HmxAJiEGjpu3hL1uVSacVR3khY=,tag:WClshtxR5sU5AWxHp9eJRg==,type:str]",
"provider": "ENC[AES256_GCM,data:FwQcnZI/aT6/hKcf7tzYDjcwFbheSHw3/eG+kb42peQDpbw5sgXET8gcUSjLWbQI6QlF0bR+,iv:8CJfDZo3z0MOlrlXBmVuEyQfX63VpCokoDrckDqPjak=,tag:4a09OWp5MS37hviaPYnnBA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:kw==,iv:Hq909t+/MrD4cfH6izVC21CC9LQkAxSUBl88zq4DrVQ=,tag:ri1XZWooIXGpIAlvp1W5dg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"computed_fields": null,
"field_manager": [],
"manifest": {
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:e7Uauede2D+Uze56GTMUSh2awbgolUawcORo,iv:j+dSO9Cl7STLl1FfYYQAQmysrFN55xw20nv79oKCHGs=,tag:g5M4H/RuGnXH7GsNm14xpw==,type:str]",
"kind": "ENC[AES256_GCM,data:+rgvAg7fUa4QEEtWRRA=,iv:aCqHN2CJ1e6z35tTJKAXRDl+82qYz/aYkxi/rlX0Jcc=,tag:Ixbw7Kn2LbkX59Nye7yE0g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:BdTSMmi/jRhnKvAzLF1Y9yUZ2Q==,iv:I4BvTCallg4sP1VY18cd/llcEhG/WgLJ81xGCGZs2KQ=,tag:l0JcBrPjsDjGhkN1B/NccQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:liJdHCS+fOBo2dI=,iv:BLJlE1rjMUCAWH59S5nsqEwrzRrFE22tAXbE2SEUD5g=,tag:UtHqQu1QufoodqornxzqNw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"spec": {
"dataFrom": [
{
"extract": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:tHQdvET130V9N8w=,iv:F++gQxjXwY0Qh1kXt9uoT2REmae92TYvhhhroA7Bt7Q=,tag:3ibQQY2CeDfdbWMoGlW2Ow==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"refreshInterval": "ENC[AES256_GCM,data:yrLq,iv:qIm5nv3TTLMyJ8T08mrBlu/+Dwh/htkTSS/wrYCNAx8=,tag:H7HNiejprclUbyM1azwsng==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"secretStoreRef": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:yhzsBVCKyDopt+RZWrPr+uoc,iv:ZX4GG+a/h0iIVOBEUAjjPrJysNFGzqRexoLzXEJGy6k=,tag:Gz9iTkzUDfY+J1tiAj9MHQ==,type:str]",
"name": "ENC[AES256_GCM,data:Qp0tgCFDnOw=,iv:7LVc7anBFTTp17SvXUeaZDYSB4QMQGXfAVC2evCL530=,tag:clZtActH5i+1jSx/v7fbUw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"target": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:z/VH2B8ahDc8GrxmhZY8rxagBQ==,iv:o5t3K7gkbYIYIS+rV/uuO6B/rl+UfbsOYo/km+PGuUI=,tag:wQZPm6f5J2Bpc1NgO695/w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
},
"type": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:zLPoF4l4,iv:s7X1PBnV1d01x5VDGpW7I3lbxBYC2bN6lCYQkgFEKzs=,tag:9cJlow9xZtto8eNl+baqKA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:7tl6CWoo,iv:kru5xhP3a0g0kgWjOEMKUGVtb/EpwizpHMPWCQTinuM=,tag:vbrbsUSkATUUEen8Ev/Jtw==,type:str]",
"kind": "ENC[AES256_GCM,data:3+sOCMGv,iv:au0+hIRzT1GAEoYutVZ9uCRfG2ygL1JH3+EIFfEtFw0=,tag:cZZAgnktM0SvRSloQaHaEA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:JAEyJgBd,iv:QxdTUh8/iOFHfhLIUL0KCg/hm1hd3FYn5lEr6m+bM4o=,tag:Grt+TzclegjhPEjNCawWCg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:qOOd8oS7,iv:2JTpIIPCF142GFi+GYny8upYWhEZjmqXuQWWhx7JvwY=,tag:iNJv+65lVpQVUGGZr9E9jA==,type:str]",
"namespace": "ENC[AES256_GCM,data:XsZR8CPc,iv:B2dhD+zClBZ7UvTaR7JUg6Pgg3keLwKp3gP9KwJ8VBw=,tag:Wwe5+YOIf1J2nUVKEnGMMA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:dAaAsqqs,iv:MEViyX6g++cS+a6iZNeyAtGkAZShSDsMbNsytLXoWtM=,tag:hiN5+2yCDDkiHWlOBu2x6A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"dataFrom": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:5YxMjpc=,iv:NlhPnVXgqgeTEpiXhTBHaLsTBazDF2HI1fReOxc1TmY=,tag:vP+grJsenlKBBlvFFRUnfw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:+he05FxQ,iv:kWa6INPjIKznDRkHjCIIDacSlUjIbtbO6gDpGfK5oEQ=,tag:4AI7qRC0ddna6xE2zRXxMA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"extract": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:SPUVrEv1,iv:fWHdNlqFvCo2fwuSMYYjYGN6Fkk6vP/T60ch3ZS0lpY=,tag:ToBx0eiL0zhNS0L9Obes3Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:2BRLv6I7,iv:stxwx4L92rUONErpC8pka3g8lddre1iXD11If4e+h+M=,tag:DIW4bf1BDxgokWkDjGPMyg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"refreshInterval": "ENC[AES256_GCM,data:6gAJgX3j,iv:KEjYByE4g5HVtPD8MkJY5wnjavyNO0u0HRv45cnAsOY=,tag:mvcrbQ1W2+uVijV9mIeaLg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"secretStoreRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:0Heir7NA,iv:ybCsW5rPfOGANIgPrpMnex5MWkqit2ZsQNijDm7LN/g=,tag:G/Nlo/jflG6MfxuYOgt4hw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:+hnESuHZ,iv:d5zQWgN4wDJjKw7lGyGpbj9D2CA0OMcu9If2rI6GZ6g=,tag:oYog2NCpzSbcxHfIB2b3AA==,type:str]",
"name": "ENC[AES256_GCM,data:zfsY0PLR,iv:6JnYuix25B1sEi9djDHhtdQXj0YS1VPXJLrfZtnOJ1g=,tag:4zlWRdW91Lps8CLytvnHpA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"target": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:GQufPXdL,iv:nXID9IJrri5TDbZhfONq0CjWT96HvM7gzMAsbdCdigI=,tag:BtmGL/ZcoYoCWoQKNuiGog==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:0zHf6Cbh,iv:5Rh9HZE0m6ou28oMFA2xih1lFJ8XZr5LyQrea7bemvU=,tag:j6XSHjPhAnV1zBq7N7uafQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
]
},
"object": {
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:EKPRSbHRAqbY3cmjWvRWkr5rNJhh06lH53EV,iv:2JRiPlS5SKtVhokR2odn4GBhHH+0t/3RSzBdtTPHT1Q=,tag:IMS2PU/wR2TjGDsVp3mCbQ==,type:str]",
"kind": "ENC[AES256_GCM,data:89te6amfOU+WbtHpK0s=,iv:xzKX5Q6jDt/ZiyaN88KiJByLkeFIVV3E9FsUdKqWW/Q=,tag:NbN3XypnRyOJMfKWK7Xe1Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": {
"annotations": null,
"creationTimestamp": null,
"deletionGracePeriodSeconds": null,
"deletionTimestamp": null,
"finalizers": null,
"generateName": null,
"generation": null,
"labels": null,
"managedFields": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:UoHa0jppoSC/3ch/vf4oIejcAw==,iv:/Y4FTi8Lx7AcbFzv6atiIIlvRP9bkgmQmaOn9pT9KdE=,tag:TdOUmQXnMi8Nfu9bVSO+Jg==,type:str]",
"namespace": "ENC[AES256_GCM,data:RcU/HObaLo4RmhA=,iv:tysai8HNSglCfLgp6gKr2ufJvIN/lkkF3NDG1yiEs/Q=,tag:V6myVTqm5EeoE56c16J6tw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ownerReferences": null,
"resourceVersion": null,
"selfLink": null,
"uid": null
},
"spec": {
"data": null,
"dataFrom": [
{
"extract": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"conversionStrategy": "ENC[AES256_GCM,data:BO/LhCWgiw==,iv:AxP6N5Gy2qWfUZpC3puANXK/XAl9q9pQDl2eQ0QQurw=,tag:Oybp0Y5m3BHM95A0Qji4fw==,type:str]",
"decodingStrategy": "ENC[AES256_GCM,data:CdjAeg==,iv:P8d2cZqDmyUKOtsLcnTUDhuu4FGq4lF1FLe9vlsx4RA=,tag:zCuyyeDO5PJmBnbp5CfnLw==,type:str]",
"key": "ENC[AES256_GCM,data:ZuAjBhc2aD+7T/8=,iv:gL9JBP/2Dw34GvITpCiewCbuXzHtmb104irLPUVzjZg=,tag:ZxCC/fsyxeNH6lUITcXkQQ==,type:str]",
"metadataPolicy": "ENC[AES256_GCM,data:gtkZtQ==,iv:37be8VWvsFrhcosLiZoD74VOg7puNFlVB9/Z/xG/vOY=,tag:fktkD6uuWy9sveYbhTyamg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"property": null,
"version": null
},
"find": {
"conversionStrategy": null,
"decodingStrategy": null,
"name": {
"regexp": null
},
"path": null,
"tags": null
},
"rewrite": null,
"sourceRef": {
"generatorRef": {
"apiVersion": null,
"kind": null,
"name": null
},
"storeRef": {
"kind": null,
"name": null
}
}
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"refreshInterval": "ENC[AES256_GCM,data:Lrla,iv:syfNRMK2kxxnk/1skTON9PZRmrusgTs0SOWPhbzGRrM=,tag:ErkKa/60Q9grI+3FDj3hZA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"secretStoreRef": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:Arp6Nk4yM/xgEewrt7JbvK1U,iv:fPkhgtWn47plCumjnX/nvpiiyJ1SdPs7SFyC+6m+MLE=,tag:A2jcTFX36Kv1bfWCKGALxg==,type:str]",
"name": "ENC[AES256_GCM,data:8KS7fTTnX+E=,iv:vB7ugtKb6NJluryfMLAJUbCqBrDbmNDCSzIjDUJfG9k=,tag:PY/qoDM67q75k2E2AmkIWw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"target": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"creationPolicy": "ENC[AES256_GCM,data:fMIxEzc=,iv:FBTeq6ojbT+oPjwqGrdrs3heNDJEGFfC/cImDsdnq7g=,tag:qoBo9MSm2vzL9/G+r9UtSw==,type:str]",
"deletionPolicy": "ENC[AES256_GCM,data:TUr8FTvD,iv:64+baR+HBAKNThVXOzXXdWr+sMK2aDhdPueqDFLJ+Mo=,tag:4dfbzBdsqitY5pyPfdJxDg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"immutable": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ha6Goi2E9DgBA73V3rC7nM7g2g==,iv:1SMqKo69rSCcN7uRlg0q2by79GmtyYYbfc8t6vts8u0=,tag:w/YjPq5OR2xWcQ1gbkgafw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"template": {
"data": null,
"engineVersion": null,
"mergePolicy": null,
"metadata": {
"annotations": null,
"labels": null
},
"templateFrom": null,
"type": null
}
}
}
},
"type": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:3/ZPuML8,iv:Ne5Q+GiMtlu+A3gcnt6KXTEb8SztZd9HIgSFuP1DyTw=,tag:F5S8qhYsmFKQldosovdYvQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:O3dODnl6,iv:J29fRiBaBhJ+Y1aLcL+2+77iyq3Ik/nGcRCbkTOmYKY=,tag:MFxkehZqyCsTjRKll0lMKQ==,type:str]",
"kind": "ENC[AES256_GCM,data:1qeAlAKQ,iv:TCy1zwdQtN32Oaz+HIxguq0Nvgftl4LjAmeu8CNMQBQ=,tag:TSzmIMks/w+73fKrKyMfXA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:pHDxYG7Z,iv:wlzqy0P/vYxvjv7pR2ppEsHH8X43p0eecLlecUhyelM=,tag:ragjmsEJAufNDcxkNMndIw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"annotations": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Wq3n,iv:2P59MkNbQTQ4OZ+KOW1qtTSNnZR9E0hDewr6R09jbmM=,tag:SMeJdKQYPV7svXPOMUbJcQ==,type:str]",
"ENC[AES256_GCM,data:RgR2+GO9,iv:jgFNACcNUk4jSvmzlXIYY7uiRxFzvDgu1yet54aQad0=,tag:9UxUPbaaAFuCTyMQi89REQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"creationTimestamp": "ENC[AES256_GCM,data:ivj4n296,iv:GcinZ73XVZrs8RTd/egGugnpc6OQAoxBk/JtY/8+0rA=,tag:7gJV+0Wzu8xroBHl5Ci8xQ==,type:str]",
"deletionGracePeriodSeconds": "ENC[AES256_GCM,data:5KGYSzVn,iv:/iTBECN3hL/gO7UJDSn/8zQuRr+6ch2bAtAiwZemh3Y=,tag:h7zBG0e8fXlStAKDpHPMUQ==,type:str]",
"deletionTimestamp": "ENC[AES256_GCM,data:RAF7cYOA,iv:HwjShtfD99g8QAR+ElN5FaGzToCXL+tHKM3nH95u4e8=,tag:4txr70neuGPK0VNkdz7C7w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"finalizers": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:xpAetw==,iv:3EZDkhHLTfakwFSESwnsMSZhj/onoMTcdNYHAspWrUs=,tag:9Oq6LSKkh2YbDox14R5HeA==,type:str]",
"ENC[AES256_GCM,data:YXQ3vx04,iv:Hg8D6uSS88+dIS0BiepBJ6INPDZNPI6jpOjifyjYroc=,tag:9mPldDY1Ln6bFk4Txn7FpA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generateName": "ENC[AES256_GCM,data:2QODFI+z,iv:beT+sc4o3scyJym2JwzrRbLY1aY58R0seRAks4uJcm4=,tag:AlkN3g5bFuMBmNIP14khiQ==,type:str]",
"generation": "ENC[AES256_GCM,data:Y8J0kRuF,iv:BAYKrzBEkZeOjPbg2KQIbKM/MpQnSysN9YVXnvw8Dyw=,tag:l0QGtaSXWrtfFSKQDib9JA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:/No3,iv:j+qUfWF56N51ZLG53H2ae++dPhkIFsKfm+K3XRfD5HY=,tag:yNLV8rMm91rronOBN1R/og==,type:str]",
"ENC[AES256_GCM,data:q2mgAUm+,iv:3WzV5+jwhajFXaHKad8ldNp3b1gBOoLHO+x5eEhmWHQ=,tag:OP4iA93Jl1VOplgril2x6A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"managedFields": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:0j8FWXY=,iv:NlqkMbpPzbVgAAOaCvh6SKWm1InucWW5qqEl1ZmkDU0=,tag:ASVN0iXO4wQ6Tq5OMvzJsA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:XhZyUHf9,iv:1GOBNmjsas0qLuXIa8BbnlJYIB/ThwHk3tLdGc2awjw=,tag:hQb1wuSx7rtnWz0wW8daWg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:uTasut/A,iv:/X7IxPwoNZG6beLfc4QZKldSrYbLWyrtt8Jb3oa/PLM=,tag:wTWyBgKboiI59vWeiUnjKw==,type:str]",
"fieldsType": "ENC[AES256_GCM,data:zjrTIStk,iv:UFh3/82iG9DSG6PBnLuGpJoIPH4ArUeY0JLNmQ5KrO0=,tag:CTMNfZDjwtTpmIs5FSRT0Q==,type:str]",
"fieldsV1": "ENC[AES256_GCM,data:Pxfl3VqwUg==,iv:6cR0ijTI1/8aR9vMbtZT5bTRyCpJeuloJsryISCLpp0=,tag:uG+K2s6XJBEPg9X0+NmXXg==,type:str]",
"manager": "ENC[AES256_GCM,data:TUXZzQRt,iv:4Rvfenp0YFQIYZ+yvPINZdW88Xqxh1mQ8hEtyynsobA=,tag:D56gKuDXnUc0nMhTQfGwWw==,type:str]",
"operation": "ENC[AES256_GCM,data:QAM6Dzqj,iv:Yh0e/hS6rujJVaTa4c09S1+lPun0IfcHBBX1FN6+25U=,tag:D+aRHcDykVvRqnE1gXNwng==,type:str]",
"subresource": "ENC[AES256_GCM,data:+zH//4Qb,iv:ioRfwEIZVnLq7f5YvmYkX+Sg4cxiPZJwNtdyItZC4xw=,tag:pNug98TN5PDEQr/AcG3Wxw==,type:str]",
"time": "ENC[AES256_GCM,data:EkQ/3xNi,iv:IuBegNX5zteo273SPguZ80E2JKh2fyHp44OPWWRtfH4=,tag:qhAx8iHYduIEpTgNIUfyQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:WeZ1zCQX,iv:jRcJvmbkEIscg1E2Y62XQCfVhQmHxJCHy5y9qYMxog4=,tag:LgGrtM9RSIw8xZQIUtxivw==,type:str]",
"namespace": "ENC[AES256_GCM,data:aoN68U8x,iv:j2mhbLXXsmAtsf8EDA9Wb/0eHRxB1kVIqZvxqZWJ3Js=,tag:TZtdPbI8aSfR8xqWZjYX7A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ownerReferences": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:qHQ+2g==,iv:9KMiybEDjOIuQr9MquYTBryNWab++itFBT6Yu5AItfU=,tag:P+hPQErEkHsUTuVqBzh4IA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Lld7xzSt,iv:i6ujpqNy1VcmXY5bylCY0wspEBy2balb9GRYkBFi5Wg=,tag:meibeAFXw2QocfIkR991rw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:OKffWGmA,iv:XGE/WgjDZItKltWU2ApWaEEFVYZg/K+vhq9MEgZv+hw=,tag:3mjVGQ+mubsbwjRMGjVvpw==,type:str]",
"blockOwnerDeletion": "ENC[AES256_GCM,data:rMIYoA==,iv:9wdMfmCCDTgtKxsNP4qtHo5Thoi9r7PGNIajE7T95vc=,tag:y0do4BuEIZMq6FKBodxS3g==,type:str]",
"controller": "ENC[AES256_GCM,data:bCSejg==,iv:ix6gej419FFlyPiZKP5YA/UUqSSa2QXNLd8wTkIcgcU=,tag:41516IXzxF80V35wJ80m7g==,type:str]",
"kind": "ENC[AES256_GCM,data:+9xvlkJ8,iv:uv6HyUD7biMqD1IQeYGMAtNnIRO/xZGBx+GTIoR2S4Y=,tag:6A/5m4MYam0e5UxnrAvo+w==,type:str]",
"name": "ENC[AES256_GCM,data:GZg4HJLV,iv:xzaHA6Jw6jwTcSxn3T27mvoxIxD5VVjPbqWlaTOTppk=,tag:J1BgoooaBUG32mN4UnTFfQ==,type:str]",
"uid": "ENC[AES256_GCM,data:Qxe8gvNr,iv:GKKNMNiaZ3F6Zj9ySJrD71R3loBn2kOgC0o6V5VSWgQ=,tag:lBEKnVo9377I/8DVWlqxjg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"resourceVersion": "ENC[AES256_GCM,data:X7mjAih8,iv:7J+hC/vYh6+QflJA7Mi1QTrP9yEEKpeUteFGGSI9SIs=,tag:rv52DNc2N0v5SVoJSgNA3Q==,type:str]",
"selfLink": "ENC[AES256_GCM,data:u2wDYvQs,iv:yoGdkM3BOpxT2P0vnT0ApghXvzyrVbYdCeuD3DO3BaE=,tag:t8NCH7cyIj2s6WwNmNQKiQ==,type:str]",
"uid": "ENC[AES256_GCM,data:hv/FZpWx,iv:t4zjPyBi+N0PnXy/oN2rIJozhguc327cEfKb1E0ODG4=,tag:FTrtZSvjBAnysMVfh0Nkeg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:N13dmQ8I,iv:1JbfvyHz9DrffWT0XNsCdEgP5Dr/G6fnM9QDE9pFAxI=,tag:n/Is8xuh7KIX1jODKIar+Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"data": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:mFTr1g==,iv:/+5UTvZZj6NNIl1TAk1Un1aB/USu5d5jSFwi911IV7g=,tag:Gn3NgRziuqlIGdom9crxMw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:gloAUwQ8,iv:s6JPwLQ3t2iVrPYehSXw1i3we0a6xPAY53KL4UvtJHg=,tag:d527n+u7k9bJ0UgF22dplw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"remoteRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:vLFiHdF0,iv:20PhaiezFaP8d4TGqD8E18zMSogJXwCxIikYUyW4FCs=,tag:izJb5YMF1bpoqd/YPirThQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"conversionStrategy": "ENC[AES256_GCM,data:n39gxOXl,iv:Y/R+IHyuGpASmBgD/lczn6yZKgdTQBC9BgObKHSkHEU=,tag:NCnyT53s8WT9su6yDOpjDQ==,type:str]",
"decodingStrategy": "ENC[AES256_GCM,data:3jgT1/3B,iv:BCHItUJHK1UmAHW+Bgui9lUUo2yACkcz/VqeoXu+VSY=,tag:F7iVoh6931AWZCHFwLmiPw==,type:str]",
"key": "ENC[AES256_GCM,data:R7MP2fga,iv:Q9HqGGCfp541UUrTmkcQesckcTH+whCxPp2ixqyDiNw=,tag:ajRd213NHD1kLSlxOXh+Zw==,type:str]",
"metadataPolicy": "ENC[AES256_GCM,data:JueP3j7M,iv:Av6upzSYP2B+JRHQhY5Tx72bmYLWNX5zpUfBFOaLcq0=,tag:qLH4QeFO4MX6QwwC/fOleA==,type:str]",
"property": "ENC[AES256_GCM,data:mN2le0r9,iv:5wnXGRYFagq1q8XWH+VUs6vYYrJHL1XKr/Nibl105HI=,tag:ulhngedCwK98Hju2QfaVOA==,type:str]",
"version": "ENC[AES256_GCM,data:LRpjm5QE,iv:rZibYr0iGydH59F3oAWy5fPLXiF8/YguyIpVfRcphao=,tag:wgTXpmBKTrB3Y+nJtxkVxw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secretKey": "ENC[AES256_GCM,data:gb6JCI/U,iv:O7zJaFlprLJAsD/WgvpsqnzphdOmIifOvNACem3cb50=,tag:ZciiyJ1OoT5JL5Te8+xiJw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sourceRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:spMK/AQJ,iv:RU0YlC54U3RRgePxpCT/4r2GyMwQNR31BfxebknYwgE=,tag:wmTi1UcKXUbh/m8gAY1foQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"generatorRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:focQT4SB,iv:NkrU9LRnvIhF+CsCAvElEktJs76sFn2zs29M8oLAuuA=,tag:J1qvZ6XoWRdSyyksONUwOw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:oOqUbIaS,iv:B0KsVT9+5ypdHu09eR1TB0Uh9vLT6bJNq+CX/GGrMH8=,tag:1DUELDZS+7YPUZ9GSSQhkw==,type:str]",
"kind": "ENC[AES256_GCM,data:Xhau+t6b,iv:j4AGNLK7eiOvXLIUR8kGRT1rsYSQDEFCDUW+k0NHm9o=,tag:ohejIhwv6jtUrcrFP+15dg==,type:str]",
"name": "ENC[AES256_GCM,data:u2HtZUkn,iv:k6lkZ4xzfZQaHFhdRbyycLWZPwnOeWFi6fAldXW5eco=,tag:5T/1Hf2gZWxsm6eXEzqRrA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"storeRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:xaPBjkuy,iv:+cNf3wHsHaxoPyBBEPNjzuKasHI5wzA7rSNFRdDofwA=,tag:5dGB8ndNHllo277wsqI6Hw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:y4C8ElNb,iv:cEIMr56N7QbIx0bWJc/4GXjjI47DioTwenrIHTFcJJg=,tag:n0syAf4MhbOCXR1HnJ+Adw==,type:str]",
"name": "ENC[AES256_GCM,data:emR5K9a6,iv:Fs6k6JZ8GZ2MH8YDTfE92P11TFo9IC1caDFiUFrijow=,tag:2Bbz9emaAVpou1K0i/ZLOw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
]
],
"dataFrom": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:eWqWSw==,iv:/67FncLOhFUHYMVJI9QHUuo/N/NK7gRcxVscmjkXmrs=,tag:4wP2kr3r2VOKHXQwjkBVmw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:RTPrUaXp,iv:0CNbQjGl3oc23J4N8WEZTqxmigryzQHO5xlDbaE5xdM=,tag:XLmkmP4AWJyI4WucrYENFA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"extract": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:lGkOY5lT,iv:I7rbjM9LqyB+C2cPeJodcgStDCgAKPatUik6hKJtSGI=,tag:Ra62KMhYHf1mkVYILaCOxQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"conversionStrategy": "ENC[AES256_GCM,data:ITxes0dg,iv:zSYngY7DIvcblZeG17Ho5SbSn4SEQG66pFnkvSrvu8A=,tag:nnKilaE28OvOEnDFBI4qSw==,type:str]",
"decodingStrategy": "ENC[AES256_GCM,data:48FV1+IS,iv:aSPGBk/qEKGAzEFEpnAgJiXx4ivKSiXc89TtYqiPsEg=,tag:NI7WTy7ywgrrhmxVB2poxg==,type:str]",
"key": "ENC[AES256_GCM,data:kFoq5nYk,iv:SDbsGl7Ylof9rqAVHntWkrOnQ8GSJSvne4xvIuvpUBA=,tag:rhk5n2LepTq20rd2C5hCKw==,type:str]",
"metadataPolicy": "ENC[AES256_GCM,data:/5gppult,iv:jL4o8gzZBzUrgmHQwFn2MPOFc1A5C/xJGgHQlDeOlwo=,tag:VTZxKk6x6w115DpZY64H7w==,type:str]",
"property": "ENC[AES256_GCM,data:sj6jnvQN,iv:q6e0U2Gz0iFBbNoVslmiFXNPS4MuHKro6JbNy+cnSMU=,tag:v7CdptufRAW4yJk3ZmavOw==,type:str]",
"version": "ENC[AES256_GCM,data:pZzVa8RU,iv:lEXRFV5f3XAWXZ8fMZD6QTgI8io8xN+fdDOSnn5r2LA=,tag:ItrS7kA3bXRCrW8j0pXxBg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"find": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:3HqO36aw,iv:K00VLu93emmd85CZfb/X4WyO/hHnHHE5/j3dv17rUs0=,tag:qldTKnIOICeYlV1VpD+a4A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"conversionStrategy": "ENC[AES256_GCM,data:P2Som4GK,iv:0ADvQ1IFGEA69KVZIlBQHP0jS+02UaBcc6C85nQQdCk=,tag:aYyS85S8iZ8rYhdqFZqBCQ==,type:str]",
"decodingStrategy": "ENC[AES256_GCM,data:EkAEkIzk,iv:Ps+S7RnLhPhQYLskHcJm3+cV3FQTRdEyDh/GDTQFpsU=,tag:6XfU/Cw8iJpAiJalwE/KEA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:oGhQJyCw,iv:gRga4knOj/gFmHRxEYLbAx4VcGPJKmwBtzb9GpYDBew=,tag:aUawdr9VlLmZjCoGYto//w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"regexp": "ENC[AES256_GCM,data:Bb9Ph8fu,iv:8X1hRTF85idQwSO1yZ7zQ04Tq4kuVZhP8RZBzwVaz30=,tag:uyNAYC09qlCzqek5uqNgFA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:MD12Em7r,iv:pTDt3u9HcxXKFY2Xo/T5RifRRrK6EwMt2Ko5MUH/qIY=,tag:kFJTidv3FDCr+Rfs+Wqv3Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"tags": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:+z/j,iv:97uZB9E4c7G8edOys7I0K6jcnuUnNdK81u/e8ANfEgs=,tag:ijuyNownPo7K4jFxZ8cXMQ==,type:str]",
"ENC[AES256_GCM,data:+6U1M8s3,iv:+UfkvQ3HCA9nCr71DK/4BW2LMsx3Z+2ErfOnwJxaac4=,tag:aStzBVaF00CVKpdyPIBxfw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
],
"rewrite": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:JNqydw==,iv:osYQmJwQNOU029Mh/0AIUZykzKI4qx28vde42eh9ZB4=,tag:P+skrdmZhaJRkip2jbJ4lA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:nXlbA+1S,iv:paidxo+4fI0x5saFK3a1VQwaa72BGaMvWyE1seNkDDA=,tag:uMJQpNsPowndEcU9mlVydg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"regexp": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:GW1Rgffq,iv:lT00fOdiXnZ15q52jYBpyH3VMMmh1grwugUiPmEZLvc=,tag:5xv5UUrx1AtmRtP+hiCVqA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"source": "ENC[AES256_GCM,data:u6f0tYQN,iv:LuWoebqJwsmRT2fuymxGBbvVLBvwIGoY++COIUPiRI0=,tag:ZyT7OYob7hm3hcPem10rGg==,type:str]",
"target": "ENC[AES256_GCM,data:oG5oBmoL,iv:ao0UrVxGoWBGE6ElbkG1rKYUy+tuZSPVjzJLbC+czbc=,tag:r0EmoW6g7fSWCTrmsPZGuA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"transform": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:luSRjXei,iv:DhWa3zrbHoJyqY4ovtrSTOa8PETx73PXWh387/QdLeE=,tag:2kz0JrGzlA74TUarlJtsGA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"template": "ENC[AES256_GCM,data:46Pu3rcM,iv:h9jBdx8g2Kv66OIPrfeEVbXa/jA0C6Zz+oPsNK0jje4=,tag:ABDre1EpmgTLU6gDczIajQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
],
"sourceRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:au66zlDC,iv:Unod1WOThywHV54oE6+HaFWjqKWe7TQ/eZflUpTl9fk=,tag:dqjPEAMBsr0+2QL56FzjlQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"generatorRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:QqgkIH0+,iv:pSYAb8jrYov2F7DwM72K5oUVhL/nQ04uLHWxLZdETqY=,tag:Zr+zkGB/J1cuGEvQ675N+A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"apiVersion": "ENC[AES256_GCM,data:L9uVpLcO,iv:7jR53oIfJNeyt+LKDlaFlrYsBln5TrBSzWBpv37EmPo=,tag:9q+tGHzrMyk28XkcKG+a7w==,type:str]",
"kind": "ENC[AES256_GCM,data:kkCit1qi,iv:ssWETEKAR2PfEnkCHK/w756asHPBfuUF+3xg6eQVPKs=,tag:4ciDJLEjeANAZDd3TA7wkg==,type:str]",
"name": "ENC[AES256_GCM,data:/LP2mYJR,iv:lOPsf/QvUufgwZNybUbmP5uI9IdAE+9nFbLqELU0ONk=,tag:8AWhYksjz6kvydq0ohAJ4g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"storeRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:2HlflgA4,iv:ZI7ECRTEE1PcFqbhGXii6+2GtDc6SNydrUWoHoORjVk=,tag:C/4eIqqQ/9XE7E96RsgPLw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:zLjShMyM,iv:9G9yYfBf7T3YQOLzMaic7OTQ7JaVf/b1oEQgBoEqYaI=,tag:7D5AmopA1JCcle9qdZUMuQ==,type:str]",
"name": "ENC[AES256_GCM,data:+4sNSx+p,iv:Ux0hnku7Xlbd55ZLcXagyX47hlM5z5DkknUeuA/EGnI=,tag:EE3tu96pZLDtzKP2B3KV4A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"refreshInterval": "ENC[AES256_GCM,data:g/5jCmA1,iv:3DgHvsrU6g61bphVBtys3OrBuFn1AhANTdpcbAFtqSk=,tag:rZ2/O1rAcMKtRrMVdO4hlg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"secretStoreRef": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:o/nU0pWD,iv:neScp27pPxjiKVQyLjkSrS6Ht2ogNAKc4/xIUCu7AhI=,tag:6hVLO9zhITqQj+ogmy2QhA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"kind": "ENC[AES256_GCM,data:Aryf4fbU,iv:zS2l2Nu1J4Q7NLShyFf8MsEmeO6tk3YYXLVmR03ZrDE=,tag:dg4G9RiwV9XO7VUCbSBJKA==,type:str]",
"name": "ENC[AES256_GCM,data:iDiTUiiC,iv:3OjTClvVbU6wEX/eZueQmIn7Pnonn6jJV7Xodzn5zqA=,tag:C+11ZovYpFBs3G2DCuxqOg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"target": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:+a7MBdwN,iv:TMb/Ln0+24DNgluI3ce4kS3ZgKCIw7WUnXe+72QNvsM=,tag:A78tG2pjaogovQ1+tZ93dg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"creationPolicy": "ENC[AES256_GCM,data:VxbabZ7K,iv:7jJzNFtEVPn79v2xNhgr0lD9JwplqJRzjeteCgZgRBQ=,tag:Nb8fX8MdZdzuV5c7uek2mw==,type:str]",
"deletionPolicy": "ENC[AES256_GCM,data:D413M1L/,iv:0lQhn/V7J1baoC929/jGJdUoVUCRIK7ibOHQFTuIUUk=,tag:6Nk3H8GNY1NKtneN3LGflA==,type:str]",
"immutable": "ENC[AES256_GCM,data:hCGWsg==,iv:YCwJuDDpz8msb1MNxOUxnpWQti2cVWfIhwMV8SSdNA4=,tag:WtkKW1Gv5lOyK/QJmfz4jA==,type:str]",
"name": "ENC[AES256_GCM,data:8a3fxxGQ,iv:sqWKogbUYpgJ3j3v7N2G1Avcgon3B1OXzoUwRdOhtJw=,tag:NYbKxzkwV++kAoVtQp6IxQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"template": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:IR5qqpi3,iv:X1w9A2/4DPz/V2O0l5F3T63aQeB1a5rAfXQ7+Gk03UE=,tag:n4KdOCXhcmILmqxUk1tmkA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"data": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Awsx,iv:5TNoKQQHdskwmh9Dx1KjThEvMoqOTcKiQzrh+vnImyQ=,tag:LTzMs/9I0aaxh0dpJaQaCA==,type:str]",
"ENC[AES256_GCM,data:1iwC89eY,iv:CT2BNj1mgBbuofuQRq2u3iibZ4uITHeHfT09LIaLW9s=,tag:9Tg2ra0wY4nm2gjWuXluxw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"engineVersion": "ENC[AES256_GCM,data:st/Janow,iv:OY/CNwit//WDydHhpgWK/gSesjcYyBZE/vnuGv5TbrU=,tag:fek8ln1qvc/RqW8/mWARAA==,type:str]",
"mergePolicy": "ENC[AES256_GCM,data:iPFztuX6,iv:gOvC5x8KnxNZEC6RQ0I/yU1PbTVT97OIfb15kxiryEs=,tag:g+o2Ac5DeQmnFlvbyL1dMw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:cAi6LFsA,iv:AR56Pmudrd/yCv1GUEM6eoEvzaQT0Py4x/3gcTHtcOg=,tag:VHhomNacbE8zlVhECdc/NA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"annotations": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:pQAZ,iv:bUjVy9mSUtZ3u+P7rJoRdBkDcwjxvh/OAHAH+R1kQG4=,tag:O2sUPdIo0LP1bqqzJUZcSg==,type:str]",
"ENC[AES256_GCM,data:Wq4s6lZN,iv:BCW1pEfe7kwx0ckpJQuiA/TraIs6xfNQFKaVjTbekbo=,tag:FQ4hKAaKa49xvu5zN9qWSA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"labels": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:BrH1,iv:9UP0OG41H8BZ85gH/lc8rl+BJrXdGxu8U6F2UQH+zVs=,tag:pAxNHfgVPMQEPkOfJhjBCA==,type:str]",
"ENC[AES256_GCM,data:S+a5D5wv,iv:qX4X8rH2MuwWSkKJCH5ODvtHOIF3BkOXURRD+C9DVj8=,tag:8mmP/Ey4+lJdk99V6xZFgg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
],
"templateFrom": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:pWSFEw==,iv:PAjWvV2qMadzvwq3tfnCbIKNZitxWRfiluQX745IAWY=,tag:2qepUhEFuIcUo4TAV68ViQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:onyljWRo,iv:1NMP92TGwT0MeC5/CkUKpLbMD11mUCJHBXLSR1P6a5I=,tag:nxbHOe5EdKz5ctgyKPGMvw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"configMap": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:y6caoM3Z,iv:gSU7O5v2zAsE4MIr9A+R7O5FqYIPouhWiY1UQWmtmss=,tag:v2IF7Qv7wXUHSA/g/XL1Xg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"items": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:HE1lZQ==,iv:BrZKTVV/aMbzQgV3L+DzgFikkcFk+elWytKq7hAvLK4=,tag:+brvKzW4FdH5BhnvhJVzIw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:X1sKNXfY,iv:JoIjubMvNxvq06X3NvlmZr8HeQn3q831M9lasMALRQg=,tag:hzkG70iVvKvnJR6OCYptyQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:e4nXBgEp,iv:7qs2JucH8cvw/jVOTIQL6cPhJ2vD4g3NZ2vtm7UBVtA=,tag:WX6QZr7UmGoYwqzuW/UhLQ==,type:str]",
"templateAs": "ENC[AES256_GCM,data:3odaOKqW,iv:myVv8qwAXlnz+qvqTIeTe+58bokeKi5ec575yC7AM4E=,tag:8t1ENTGTVN9OrLfHw08JRA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:BCexfG3G,iv:rWfrdfMbYF88DG3hfNzoExjUov/ToOWsvZ3Cpt+Mmxw=,tag:8OfAXSCFi0JYZOoNLbG3kg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"literal": "ENC[AES256_GCM,data:M48inlHn,iv:haXkTLbmroIDDS1xfaXZuPBit8IS2HR6savgE2KGE1g=,tag:cpoYn5aXjwnhxLDumN1N1w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"secret": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Wc85+9zC,iv:A0u2a6ssd7nFemD0xQFUJ1xPTwHcVwG6aLfK9sw1pXI=,tag:tF0d8zP3b4Cff28Yb57sBw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
"items": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:4vX/NQ==,iv:58RhFWQnYi2sOX9r9pnF5QZGt4XNclpWAYK137VTcM4=,tag:qUW2pF5vru1HKHIzvo6N8g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
[
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:jGQLd9vY,iv:WN6UmZohFE1QPuLcBOm8ad+dT1fHDhWRYC/d6735SWE=,tag:uFgJ6PhC3TiCEWOlFhCyKw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:6cj/LYOE,iv:obSl9lHq4rlJ5QeTFlwHgiiEmoFWxBZEO51wEyIyE3k=,tag:UnOmwI0TItxbCvEXNcCCHA==,type:str]",
"templateAs": "ENC[AES256_GCM,data:lEbSKCXV,iv:DeNZsQSfDMkTO1yCrMq8oaGsA7nuP24lmjYqDeqr8tA=,tag:RM4eK6ulGynzARaCmKVKOA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:YCvN2YSR,iv:ZhYqirDIFfyj2b/t/7lCkjBfsjgX1a/UEpK3U6XKxeI=,tag:pAU5fIo8mzOHRm5GEDvV6g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"target": "ENC[AES256_GCM,data:/IgNjN4i,iv:ilt6WBIEcf+efO0ApU2NccDVVNoekXgyeM5C55WuQJc=,tag:JwLt0SrqGEXCkQXTERTI3g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:vrzEMYbN,iv:FOGpdRwfVZVQ+abvD+0MPAYU0T5JYDNDPVpfErjhXaQ=,tag:YFVl+aWFjFanOOFgs30VGg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
]
}
]
},
"timeouts": [],
"wait": [],
"wait_for": null
},
"sensitive_attributes": [],
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:g6hvR9mc0EN54ECg1FbRPfE8laAH1+B3ne8NZa/1oDw=,iv:3psddHDqPY60Bb5hj+1guUOjHtjLNUekIdO8Wy/47Vk=,tag:fs4hi+5a7gD8YUFHkn9k3w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:qMyEL7717w==,iv:jBSmtk0SAz7/TVrkB5FsvMqTqUMUYKyIwiJsGSptI6w=,tag:6yz+wiwE3nMCYZfR6ueptg==,type:str]",
"type": "ENC[AES256_GCM,data:SZDhjBQF+qOYoM9/mLjSulzCpXo=,iv:uvzug5lFQA4HUXdZwD00HPuvPj72OBv6qA4RBC6gQp4=,tag:SurL/9T5UdvGm0Mc76YOzA==,type:str]",
"name": "ENC[AES256_GCM,data:NDgIqKNibiKMjOw=,iv:edP+7KRb/qu+3DYHDlTCl3RG2guZydU/oyzqkbP+ycU=,tag:CdYjIRMHRNi9XFz3E3/Z9A==,type:str]",
"provider": "ENC[AES256_GCM,data:a5UZ7xanLQazV4u9zFdLykOoz7auS3eGyqb3iFquPNzDDk85+zvrfVvdpYQ+4YoJza10wRFx,iv:4rEgv1wnbvMhKBzhFwW+ZVu+/We0b+nIXjUrBmECyDg=,tag:bcfztLSMZXyJwW7PrPJDjg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:xA==,iv:Y5XzrM88YWM9bC3UgCydKKSHgmoPu8R1cK2ZrakPLVw=,tag:aDKJ7/UKLM91L5+h8/gGbA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:cMLS5fbxlUvZyB4=,iv:IVGBoQl+cHSpehycdRtESYigFq5ZWHOfBK112k+YOf0=,tag:oluiHUR5o7dvdUXCDzlS+w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:FQ==,iv:p7SRthiKyX0I1fN7iI/uxNFB8MDDa0DrHbxDceEGkUk=,tag:xOgRiCjwl36jAXyLWnOvPw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:07FK,iv:57JHk0Gt7ZNDXsp3i0PMVjneqoIKatRyxrijvLmsLN4=,tag:IQkthzKVxWpfFns03h+iYg==,type:str]",
"istio-injection": "ENC[AES256_GCM,data:PniuavtsQq0=,iv:Bkm2eDbBRe9GmpFhF7jwq+S7wSzMgt7Xo3663NgFVCg=,tag:LFM1i9xXaQcQkjbz38oFuQ==,type:str]",
"tier": "ENC[AES256_GCM,data:l0BML1+gDgem,iv:wcgf8hhXZzy2j8gun2aEApj1GSHFXNbeuzpLXITURrM=,tag:baXUwd7KSmIrouT7PeodfA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ADBXw68Mp++GcEc=,iv:66s2/em4K/LxD4Zr093O2dudAuMQAh4ITEPnZPcsnBk=,tag:OLvNYA59HpNXFBzAWbZHAw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:+hBdHM6Kgk5j,iv:eU70eSrG51d3IUSGrbjWyljtkddCtnXoHeX3lU8yXvA=,tag:/m2/eZgZ8+Wsg2Ef3pjxtA==,type:str]",
"uid": "ENC[AES256_GCM,data:wxyk+2Q+kdwhlmQKj4UvLD1HFZSX7kj1VXFKyQHl8FamsAeX,iv:mr87FGiEUAcDPisqT4kW08vmUhLnkcodZaSkEwLUqsU=,tag:VGJImLggs3FvFl2Re8WZ4g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:MIsPVyo=,iv:46gDSYpfyoQjx37qfRq6cOd0e3ddZ3g8vUAzNjH8lsM=,tag:KS5iGsrnaG7CDgNJGrtpqw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:KtcX+K7NQmzsd/NjvSATo4nxObhzaklwcnNlZ6dQJWkg1HZmmCnSOwQBzJBfwwPGF+pcrLeY1bRF1KFMGZEfwU+eSauIa1defKNJfjISGvNjfaFpb2VfJQ==,iv:4ar5Lmk3zjBU8abAFuzl6MaQnbKUb0YMDZcevOVl9rI=,tag:e+zjYxHNpDzjuFHmEK1JTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:SlyG58cpMw==,iv:k9I03VCdfezLFb+Dbo+p3noJp6w33mR5kG69CDdcTmw=,tag:OMkERTCdjpdzsCJ62W0y1A==,type:str]",
"type": "ENC[AES256_GCM,data:8kg/OlP9m9ZBojLooSlaFTLp,iv:6yZYnFD0vvYWRt7yRDQYSg+kVtXnTgbA7DndI8MMEB4=,tag:sA8j2H2j8e71HsVm1UChdA==,type:str]",
"name": "ENC[AES256_GCM,data:CFJ0b877b7UqWtk=,iv:YpAIwvrAsymeY91KhYgrWhe9vbdhQwHbhcGW1w5j6C0=,tag:TCQxpNTCeQkjAoJLc811Hg==,type:str]",
"provider": "ENC[AES256_GCM,data:1z5PlH8By7DegDp5jBE6CtUTwb4ViBqZBuIljJE3z5WUDPtqbeDJZOtbLl/fop2zDdUgRCjk,iv:X+l1fU6HDRxa+KsmlE3ZyttoZGBlXQYmQm0cBVI7+j8=,tag:fFGz7YN0EPmO6IDfytyg0w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:WA==,iv:frbIaPSAUyoj7xvEGcuorSNXI81dTMlLqMsWSxU9Ikg=,tag:4l2q2REYSH6lQPq4vTNy5w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:uEC/fqUwFU12ZLj/IPD/np0ce8IVrXQ=,iv:nCWvsjEl+CAmsXZzQ+5NjoHHniYI7BIEQuqj7PfBIrQ=,tag:/zn4pk+tRXHdgokA8PyV7A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:mg==,iv:/twaaqGW7aS2Y+ZxloOx8XIbFNtliiTGUoZ8BHmjDoc=,tag:9veKh/Gk87NwJg52Ze6h3w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:mvonLVRwVC8ofsA=,iv:RV4c/Qn60UDXEVivi/kajBnp+OpNAaNcllVHM9pNA7g=,tag:qccGA3sOyQfVz4woaYt2pw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:lwSCgs67F1hIyQw=,iv:xdBX+J0OtV6EjO9cHfDE3HuJB8XApEqIyv94WKt6rLs=,tag:iDPLgxxJ7OddN+OA3TwD5w==,type:str]",
"namespace": "ENC[AES256_GCM,data:RVcVErVh1WUAizE=,iv:22PcfjVb8BsQLkiQeWpvbB9HafJ6VRwiobfYkt4Y0yQ=,tag:jTjWTtxanhgxyWrJz3muzw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:+Qs5tT8u+Xfw,iv:CtHyBsJUZSYWp8BQdPbddVjiQiVwcQwJwTdbFchIHuM=,tag:eTMtf/3NuSso3Ldrok1SgA==,type:str]",
"uid": "ENC[AES256_GCM,data:ugeB1Arhj2Yv9p53V6mQ3R+uYWwy37+50a35lv5/g/qViuVf,iv:zCHk1aLIvOTzLY0c12Ai/bEfO0V1sI+DJKHA8Ce23dQ=,tag:UjZBHuF7Ss+m/F9oTl66Ag==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:HUThpw==,iv:b3N1etElaT0b6xqfgI2Vgk1kIpfMwfin/Sc/gZl3F4w=,tag:Zoygky0PdifziyX5+b+rlQ==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:xmBeV9BwttHxpI7S/1A=,iv:VbMRhhzv8tsLoOQgUE437pMVV8pkPh+YmjIzr9wQYFI=,tag:F11uLFoNo1qReIMEsazmPg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:/8JtS17NfopmPhNvkC4=,iv:N6VTkKCa/B9Mur//Tnm6iVylnN1evHX5V0IZQIHXyvY=,tag:wWfO0R4kEZoJsDFx4Jinmg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:EQ==,iv:q2Q9qfXIMc+63IFsaYxFXmfJgkzQ/OA/nCCFbcEs/9g=,tag:5LYOWEDJyrn9LH84U4t4NA==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:gt5BUTKB4A==,iv:xHy8D+4kg4ifz/2QGBT6cXrIExP7HDK0IuunelnLYxo=,tag:U8O5WGK0tpRv3m12iSkz5g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:SDYWxQ==,iv:vW+BwewHsjrIQYz3YXCoKPGJfs3YWBOtkfY5AOjcndg=,tag:/Xic7SH6tNS1WKSMhdaC1w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:35KRzwDV3o2ZHPo=,iv:Dy4v//SqpdA5+coMwwHBnglZrbNg4fVnGslcSA+LS5g=,tag:Nvh+6uYzlxU5TgT4uLnB5g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:YwnDlg==,iv:XeVzPWBKphs/YQ9UFOyIPoh6TTCOWVaz4n4i6joDSyg=,tag:FyfNb1R8Fc9uJIZualocbg==,type:str]",
"node_port": "ENC[AES256_GCM,data:IQ==,iv:SgLUMGbJwpC9/KpMqM0x9WfajI4SQrmc3J6Aem4/JQw=,tag:p9sNObebNSoHLkgCXTjztg==,type:float]",
"port": "ENC[AES256_GCM,data://8=,iv:O2zzir5uswtMBqhO7zFjlV5u5/g8zW14udEqwf1c6pA=,tag:YdGJq8bUk75dL7DAYsuneg==,type:float]",
"protocol": "ENC[AES256_GCM,data:1+Mc,iv:TRnVH3OxsGErz+W3c7wfb5QVRiK8Zv+eRF5n8m+d1UA=,tag:fM9wAE9yMJmNelv0qkzgaQ==,type:str]",
"target_port": "ENC[AES256_GCM,data:rjyNYQ==,iv:6el8NLGXopgTd789DApy6r4Ln2hLITR7LE4wFixDt8s=,tag:Xx8jc2QUkq0Jio7FUx+nmg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:M96c4o8=,iv:LU/WsK1yCQDBkYSkRuuYtgA+H1hfaEf3FXfbtfYvl6I=,tag:/SrIGfH4VNFF/29+noJlDw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:uda6IXrOgGLv3Y4=,iv:ESZL2ZywxbcJTsgVuE+VS75bMFemXIMR2fhOu/geZXU=,tag:RgieU2V0aS02IItvKuGMuQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:jRPllQ==,iv:1y9+D7HDxs6bCHp0ErE0uNWAbnxF9bLOo+vRy2BLeA0=,tag:yJ1GTc/aWtLSey9/yM+k6Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:S4dUR8IBkobB,iv:xDim3hfNq2UoipKvF1eNmwY0mRDvGDAaTIp9/FlEIDo=,tag:NspALaTZkPVsfvZ/MGG6pg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:q7GY0A==,iv:AgIjs4Srs9U6le/s7RvVzyOYHdPKWEAtlVh9WMKe5CU=,tag:ZMrpvLhnIegEw3lHw00J2A==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:YEjwWAJ7dCyBebpjYjcuUg8C7gSL38Vvz/ZtXy7qYS3rVHb5Gb/BSB6MsoHjdf9T+b7eH1GqRdv52vcySvXoN+mJGeYo1tZOBSsnYdvCh6UupurXkWEDQ4hkxpp+XANhf2xWj3Cq9f2TBFV8dnjz+NBzukU=,iv:SYhcSPK43BS2uD7oYMXEpG9jhpn1OgddiaGPONlBm+8=,tag:Fukog/F/ftcHjshxFhveaA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:9W61rmbAapqNxvgomLJXfNfPcBafOS2UM/Ar4ioezRA=,iv:8goCGeK4cGN5qvwV4GEJGt1YBRkKU8IIbG0kiWrtCsI=,tag:qcfix5UwS9a9E2ZcVb0jvg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:YgMeS3fhKXKbPvWjqoM=,iv:NQcfdL/hF+WrvQ4k5GexxbARpQGRfe8QfcGaTLMqD4g=,tag:GKPEezwj1g982rjnz8Y0Tg==,type:str]",
"mode": "ENC[AES256_GCM,data:SgDtFVERng==,iv:idxBJXR8zh20K5FerT6gdG/JuPEvhj0/0ywCkultBFw=,tag:gghR5kHPe2QrNqxzpMJxYQ==,type:str]",
"type": "ENC[AES256_GCM,data:nWq7r9LnHivHaVVWEidIs5YFYLq3,iv:zWmGmcOPtVmUANG1+IoKFkhVEAj30cOTb+697HwEiZM=,tag:bJc8LSOMjwmoblEldn/KYw==,type:str]",
"name": "ENC[AES256_GCM,data:fRLLz4nsrkY7grW1oVvT,iv:ElG3Kcn0IWcfY9pwRgYDboJFujiFdqLgZ5+c2SgxbZo=,tag:sDIfWdYUDm3BACT9fp42rg==,type:str]",
"provider": "ENC[AES256_GCM,data:ktL7gXoRV6tS6UcO7pxQ85jE2qpsspZxMo+JxYG6KEr+0RxTLPutztUrOYeZP9v54w810inU,iv:8Rj4HG8aOFUqTFEz4o8j3rkeqgHZxnYGPlYPIMIQOjs=,tag:xkD1LQyl5cKaxxUYPuxU2g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:hQ==,iv:FVb0npujQP0elm15mGKH5utt3oNdD70CIYJfeTCaHCE=,tag:61NLnFAiD6ONorVmJ8re1Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:jZFoxyTQb48EW5UPIZizKpQ9MFr5gUU=,iv:vftjTqa6suTT+5ZmmockYbN/0x/YIvYc39SxArG7Oko=,tag:tAGtNdpe5wQgJu34Ne793g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"gethomepage.dev/description": "ENC[AES256_GCM,data:Ef4lSaLnbhoBgVicK6LNcqyqvw==,iv:4Z4WYn8pmT4ZJhmZjVp+f2ZfL1P8NwiOBwGpot5719Y=,tag:CHR6SLHsGveTI5tOaqEgNw==,type:str]",
"gethomepage.dev/enabled": "ENC[AES256_GCM,data:bab4nA==,iv:aBMARzllV4ECNX4iSejZPoPL3poleHsQhmbG1g9+I2E=,tag:3CTwKAkcv4l03npTvz4/Yg==,type:str]",
"gethomepage.dev/group": "ENC[AES256_GCM,data:FbjQhILqsRuVLQ==,iv:HUwJ3iO4YE5KXrY0QrOshRGCO/niT7i94+PB8xnpWCY=,tag:kRnU+DqlD0b7DIK1rgJlcg==,type:str]",
"gethomepage.dev/icon": "ENC[AES256_GCM,data:Bk8WZ5UekkXUmeaT36kXbJ/RCw==,iv:mLW1bGLDGNk9CA/ANrtyRS82IW5pjyOfn/nmAKEFNk0=,tag:j36oBojHoKgBu2pzjjL51w==,type:str]",
"gethomepage.dev/name": "ENC[AES256_GCM,data:1NTM7ZUU4vrmphQ=,iv:lLRNLjBzW6dknX/9OC/KFhaLl9fCRVvhb+jJpeQxPAY=,tag:qtInun0WWT+YI8HtKGbKHg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"gethomepage.dev/pod-selector": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:lp29yUmgBWj+,iv:/nbpkIFcY9fmOy2SeVsmoYlhaEdV2eXLNwBErvsUY+c=,tag:Ob7OGLIgZx40nx7YIRB+2w==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:Vs465l9eAQSqUTnmumIAyT5/L4/R8Aq3yK70mLPrV08DcBYrxojJSbO1i8MzxQ7h4u5Hayk3FFj3LHSFEC8/LmOdDGzIsMOAAbIVb062/gj+RwKo9Oj7KYjKJRQug1a7CKVEzX/bvuBwdLnkCvMxeJNcoKdbwbx4BL3Vw5SlP9RbqtE7r4sdXFONJYiyqkYkHy3qd/ELpf8QpbHE3wJWF8uni2USb+BIgKZUr76VX9xNDoEOvDDGshN2B7YG+fsgQUFgxeS42iFIaLuZBKrjOFJbpzVrkbXGM51+EZmI6l6vvanUA961ejqXuYAVulrJDiuu/LH0ILtr7hvp68gmOUj0zjYrIHRqm7ly0DIHrnREA1F6PEma4tA5GQ==,iv:riyzc67Z8MHK+S87ah5qZJDiQXdwnhYreQWgtqAt9oI=,tag:kFtl1JUyw6KqoWtTRQ4HlQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Zg==,iv:u2fzImnhPAFWUwjvyZ4QSVeveqysj5tLmkuBVBY67K4=,tag:Iy7vNEPH+nV2CBbONPItYg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:h/apBXXV6NKJRrg=,iv:Dmb5pOVaeHBVlxMieIZGBLus9QgJGPqbrF9wlMvMrB4=,tag:jeQhnbmwgC8K28TJOxG86Q==,type:str]",
"namespace": "ENC[AES256_GCM,data:YfBs+vIY94sgZqY=,iv:fKxx4LIzyn7Y5VNGgjqK8PYMsfVKfFCqIwDuMfs2oKU=,tag:TkQhGFcXfNQKyoKpMqF/+g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:YFJOHWOckEpi,iv:ixfeSFuxhtn23/O+iwo+8ZN6J950Dg3vHpVDPpwA4+4=,tag:M/R1eAOuJ/punwNOkOXlGg==,type:str]",
"uid": "ENC[AES256_GCM,data:P9CQZ7FVYq0bYr4FTRnuBU0ONcDOlisw9LtxImVWck85Cz98,iv:h2dnu84sFVN/jShUbuBc/Iow130Ic1XwifDcW1OF7aw=,tag:0FTg7rwyMll59iaCiAdXAg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:lLiv0Bc0Tg==,iv:TSk/UW2YztlTWqy42OgcWzYmnmyu+NqvriSDlBN4qJ0=,tag:EcJZf4vqgGMWYQwXJh47Zg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:JmR8Z5glFiSfl7XsuNYQH8q2uQlvEKpMy8jH,iv:s5+11k7UXZ45ZA+D0o8KFHILoI5yz4Rmuv3Z9waeUfg=,tag:J76oJGQ+pF9gUagBVi/RGA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:fhDdwvagkccrgHQ=,iv:mQvpN+tX9gt8tbpJux5or26QJVVHeaLO/9mFfnHdfoU=,tag:vEsw9laRI2uz+Z6VfJEt4Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:jSc=,iv:R60MgRiKwPeOECWLSZ+2w92omsTrr+az/G8vtNE0vaI=,tag:RYTXVrIlDttYlF742G5J6A==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:bQ==,iv:NVCIWFDdq7PM5+//8dII51250Hzna74nJPSmYSGLEmg=,tag:jkey/v6yDkNSCPHKeh9FSQ==,type:str]",
"path_type": "ENC[AES256_GCM,data:nEZc8tpI6HK2Q/1IFAMD5pBA76w4+g==,iv:EYSxyU4x3kK664+E7QlwfZIVoTRxGb2IJGTKoQD41Zg=,tag:paa1o3PgwMSd7MY/Gi/32g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ApqNywIsLVu4WngQO2Y+LPFVY39NBb/HsX4y,iv:u6XoHk+6Yu+dhr7Tbv/iozIGO0oGphf4JHoVc+CGz8c=,tag:t2lqhuG850HIyvgxiBswoA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:jfcPU1GAV8D0eg==,iv:eycvgh4GJnFHsumhE+xg7V8gQ5TcH1DxPQ9ZlnNGfLk=,tag:ySPfZQd8NYgAAN+decG4mg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:5D2Kdd50EAYwZ4M=,iv:Nj5P7TS3U/kRtwPcbSW+QNG78LZT9IwXuGXcQwuEt8w=,tag:U/+tBFhLtBwIRCldjQuATQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:nXk1Av16ONo=,iv:emQ6mcJNkIecFK5453E8SQfMLxfiK/kJLRRho6eWDM8=,tag:jr/mNYe8TZgyje8eXQIozg==,type:str]",
"value": "ENC[AES256_GCM,data:dXJbFw==,iv:fuk5pDPlBU0EbP8DkbcuAlCaWiWF5Co4ZkOdhm422EE=,tag:TMTX1N8v0MYpi0BfVhukug==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:aVvrqE8=,iv:mDspa7pTx6A9FGgTLTPuGQGh+rwg0ovgKZ2NCArcEUo=,tag:4s4eO+nsst9iViubmBCV4A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:Pg==,iv:BtJQSlFrwqyWTui5UFhMvV7Ie9aFBQ+ygKwsYtgL9jI=,tag:ma7xuWI+3rkDkSCELVJDfQ==,type:float]",
"type": "ENC[AES256_GCM,data:O/GD3bVp,iv:0/0kWMb/OvOhveDLWeCZwIKICDDXPdEiQhFlqWxTVNs=,tag:VxS/2fioVBOtuthmPh9YCA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:rry+3M4Mb60=,iv:TzAz2JviJmBvpLhG5jFgAvqUyi0dpoPQhQ7zO39jMmc=,tag:DLbgFmDSGRGhEgJvI0mi8w==,type:str]",
"value": "ENC[AES256_GCM,data:luts,iv:o0qNZF30UN0wC+4AgeWzHHKCltjRFaaW6p948VLWqJE=,tag:p2pN0eov+/YtEhoPrTC6Ow==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:4PLYpsY=,iv:N55AlkQn8PyXCRQGb6dQoCvEmDnmFGsDjLGkySTnvGo=,tag:QZRKSvbu3K0f9XEGfPtvTA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:tQ==,iv:prTYxcrip2017fr1D1EE/NLMu5oDvklC9Ot0SbGJOl0=,tag:ApXYPoMZpPpgBrEcFkYyYQ==,type:float]",
"type": "ENC[AES256_GCM,data:dqCh9YMc,iv:FWDJonjut5S4eXSP5fJc4ps7/H27n1dx4ac1tVIT+YE=,tag:TtlqqLJbXy85MahGkO6wRA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:JTOXNKToUgI=,iv:RgENqPS/rYSgxIlAE6Df58SGiyw3K0jv6WRxhTbHLnY=,tag:uZpY8FrHKEleuYfoO1eGgw==,type:str]",
"value": "ENC[AES256_GCM,data:cdQ0cmGxEiMipqM=,iv:UFfO0C/NW1mFQiXq3qvvmp1uWbEONdaQUl0FRup6z40=,tag:rfUmEQxROyzgSuBD6ZCZ/A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:vBssVJPhc1hQrIJyeb/zp750l22+ZHmPxLPjoEmsb89gtSRJRkDEb8JlUGyAn4HSr2r9JQacf7XJfVbI+WI0js2ZcxmXqhGvSnnI8AzWgS18q+TCpbdJd1uiaA5nfCywaHiHtiK9WnsU2kd39ZraEOAAIppKvUyJ,iv:QbwkdmCtFWANvJNz1LD5/Orz7NyU+HcPcezpz7iElyo=,tag:oTBn0Yi9p9GYrMY7DPsx/A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:hIW9VqMb9fCyvL6qY3JHX9iNUA1ZnnYx/hzuZ79l6+8=,iv:arz6qc654t1Sz8slq9X0B4s2WSMWHmXhXRekVynMI70=,tag:tL7FavFqsCmbK9SgK6qjDA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Tha36wBRXj9UhSEbY3w8Ovs=,iv:SQnhOibQaGrEI3gjrDLd2O+O1e9IgECEFkVfIjBo77o=,tag:Mq39dZuWZDz0D3nPwl6yZQ==,type:str]",
"mode": "ENC[AES256_GCM,data:15qoSrnqmw==,iv:Q5t0M0AJrx1iciD1hDiiWD50JgaTIbm38rU4l0opJd0=,tag:9mLfbgd5K87cx4gfFbSztw==,type:str]",
"type": "ENC[AES256_GCM,data:npx8hX3ublR7Jy+b21xQnT8=,iv:GmzzBL6YYo8XoZYAzdN6X5dygFU4Hsm62k50XV1KKds=,tag:csE8Ku32d26whVnH0rd+Yw==,type:str]",
"name": "ENC[AES256_GCM,data:b1/wCNRAlqeRMA==,iv:z3A/SXmcaRRIovpRfZKnlSHFcOtRiEMmO50WBUFNsOc=,tag:I5RD3o32jEs/u6GD/CJ4SQ==,type:str]",
"provider": "ENC[AES256_GCM,data:hgtXnr8t+7K66ZRC2P6JSyesQPqswaFTVxwmBM4Gm+DGehFcVpmuY1TnEAJvcfApfsf0fGil,iv:2wnZ+hUNkYfF/PFyDZDAMAJhBpIn38VhrnM8hnpZh0c=,tag:aMZGN+SiI9jafH/1M0yV5g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:eQ==,iv:Ts6Qt0GLYMss6SjNT0Im7QR8jNfUM/MhDZXds+JWHdY=,tag:aRsyEuqBOyDQNnpfOlOF5Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:q8tawVJ6GLv4jj1nXT1emhnN0i4LQRkN56AbpIwPEO0=,tag:2Ei32ZPBvYhGOS5Jtcglkw==,type:str]",
"tls.key": "ENC[AES256_GCM,data:m3RKi19LMHG15EfwHAHACOCuxETAcClC/COn6KHab5UeOX3DR986mPV4z6CMZp/Cz6VfusB4l6is7AcWQgOQtszlpDdoqCV5pppmTzjc4sU24A7z4epWN3rLnn8pp1YfNFoQglsNELGmRh/YjLRdUyQVM76ZDepf4j4g5wgMjMNByBzZYspOGX2BU7YHrfS/DxPs7Iwe3oN7genNExisIeIX2L2iKH7Js6T947qDAN2FohYGiomHnGUVdfHW1UNuaZ2RGsi7Vrn6gqGJenIumU0q6Ca5U6BEeRQBiH4HAZZ6wnVygD5ilr/WcQst+rLETQ==,iv:Gc/oVMiRIdxX0286Zo0lC/7pCiEBD49gynt2buPveyM=,tag:VS5cVf0qEH2EXEhX/IzE/w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:kZxz6vC0k+aF8xZ3DZmJpEzgw2Z1cg==,iv:eMKEqLWpHqZGtHoHhQfxkkIhk0wxO0VyZDcOTmTRNU4=,tag:kUnERHlqgOtSFWYuCvbqDA==,type:str]",
"immutable": "ENC[AES256_GCM,data:BNm8FQY=,iv:mHZIxrTBxSg7nUx6buE39l+L1iyjdt5XeXGA1Wff9Ww=,tag:VzaENZZHaCgTDXnaimPn2w==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Rg==,iv:nYRxds7GemKty+UzEPI//1D3atdHY9q/FLp1uP75oG8=,tag:moIPlhNmAuhWXuD7lTBKdg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:k0VXccz1qMfy3g==,iv:QHdHhaqn0M8LG3UDtV7a29Gg+gA7LM6Mt5EdWYYadf8=,tag:tWxKFo3e5v/FdfDeSMlL+g==,type:str]",
"namespace": "ENC[AES256_GCM,data:OAdUoSo4AecrwQI=,iv:ucNMNcZpdk+H8mqVq64b0RQV/8V/XGUzX2CFybHc6Pg=,tag:wMCPhn8Cit/mIoGR0j3pZQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:0AhscOIP8D6G,iv:o3f8GaVtnpVogN5m/krw/oH3BPXGabswi2PgN3bGCkc=,tag:k9WbLK0qx+8gFPTIBeADbg==,type:str]",
"uid": "ENC[AES256_GCM,data:arZbltp5ZrHVrWD9wwNY5YJaBZZdh2J1h6KgovKTWTrOc7C1,iv:NA4CTbmWhYy/GB3CMN5DBrVrXxuEXqQGdEqLkYxtrYY=,tag:grp1JVjP8oarzjaLBlljbA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:NWDqMujTiwD3rH+2Ci1rE0E=,iv:yYdiWewHb02WhQrpXsMaEcrFVMul6xQJZkTJCqxbdDk=,tag:m4Hsn3lcJ6eHghJg3Ypl8w==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:Utg1QA==,iv:j+whcx/p/DeX4Rqvwo9TuTi85rv75CnFduU/de/OshM=,tag:lxwAdJNxxvnAuVTg6seCIg==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:3826SJQxRoA=,iv:Ld200HZfIxVZd1VGP9x7iq6zsTBl874yqBH31LDk6Bk=,tag:dxKrsNYPyeu5Q2KOxNFf/g==,type:str]",
"value": "ENC[AES256_GCM,data:3fCWLL9guZY=,iv:nm5PFemuO7SJmMbrDs0CWeLIWZJFprJAvnhikw3lnOc=,tag:q1qjDanPY+f/h3jhYxm5sg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:nQE597I=,iv:YSNy63w1j1O9O2We1PeM9FG88X2Ra1d6F7yQ08COSJI=,tag:z9LCmW4bLdYOwgDslxH3ow==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:hg==,iv:pEg+55nBFrzdk81vkhPenV4ldGT9hdVVpquGI7buujI=,tag:4iX61nnfTKEeX9/MujJNzw==,type:float]",
"type": "ENC[AES256_GCM,data:VIix1m3p,iv:jfal8CQ+cue/nCNQMu6I1P4E9tFJp0GNyMXMjNRWjkA=,tag:BmrMZNEQ+noVDO2BsG5Mdw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:GxYnxbROLY4=,iv:qBMTUOskAWVuUSB06Jkk4IoWkhZi8fvepVqdeAG3JrQ=,tag:NyVSI8V3iq5P68UyvPDerQ==,type:str]",
"value": "ENC[AES256_GCM,data:4G1aEQ==,iv:DYzWo4FnMp3U2Zf1rmlNUgaaWIupUyrgQTy7nTGF8Jo=,tag:bstvIe3jAp36eGhmGMSqPQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:n1KrSkagaslWzhHm2RONQ6QDOuBGWg0f4z02Sjl0rdU5hOb4WPisQ9pDWlJ5b8x/eEiWtMCPpn9dMKTpHsDtyB3UCqTGJ6F3Pw+DlcR3g46V15Tk,iv:N7n7mD9qWwFAYQc+wYwTHFRXEOQUgpFT/WgmNjb5crM=,tag:LpddSFe6efcK/j1fU19xnA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:8HPyHGEJXNwTKY0ZnwdKghBxLf8cq6L5hccVI9Isw+o=,iv:yTVrRbnV6U6hNl69UD5zMTLB/I3s+xNm9dY0d/H3zeI=,tag:7/X0dhz9iBb4uKcY/B8Qeg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:20Z",
"enc": "vault:v1:U8b7PAerFPBZYc3lsmzTSimkvQvn8OmbCH6+w411DU0F+7V0U41FGPNhyConecQY3eUwmIKEuC8OyA/O"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzUjB0Y09sK2RjUkpvNUM3\nUDdDZTk0OUtvWWcvR3BoR1AxR0tmdmNXRnlnCjMwUlZjek9nNkF6cEFsMlRZOW5K\nNlQ2VDZMMEU3UjA2RFc0ZDluUEpBRG8KLS0tIFhHWitlT0svT09qOHM5eEVRQlRO\nRG5aQ2ovVXJ4bm5MM0RLUFJYZWV0WVkKpx39h/l/1k9k1FxAfF5CSRgJ1zAEk5Vb\nKk6MxEgXx3NKiPbyYysX919ZsKFi6UpKlc0frbE9Cmz4N6CkxRmLzQ==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0c0Q2akhIdzhjazZZSWU2\nQU9jaTRUYW5qVTZoS3dBYzkxdDRaOUxoNndBClRtOVJ2UnhiWHZQUTNGUkxhUVk1\nNGZ3enExNUl3NC9ORnNuL0ZkUFpVazQKLS0tIGloTDZ0ZzlyUU55K0dmOHhXRlcw\ndFE2MmtFTmE5d2Z4SG94d0V3Q2FBQXcKTjVhrU3dZ3FBvH8AeZxiAMHoDLOH1ZZ8\nRSq3DKhWk5Z1Nfo/lkHDUHhEERdrSm3CeaIm1ugyeqPzL09mfqsyzw==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:20Z",
"mac": "ENC[AES256_GCM,data:8/C5pXlzuJ6Lxm56l31BPRisW3vwSZztr1jGMzSNk6P91tXVKui7ZlAKotdA5Rm4L5Vdzx6dVx6Xcx6TcELo/N6EoASuSjZb52VZgoMjbvuSOTDOtj47sc1rhQI5lZ8SIOjvp0lOONFvTQMXZ+zpNK+YnQ9h6lcaHCuTEKi2b1E=,iv:XSNCQ7TRUZFmoLqSTml+chkly73t1ib0H26Eyz42q/U=,tag:Ayyd7Lk1BvT52+XDppjKwg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink