viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/wireguard/terraform.tfstate.enc

967 lines
151 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:hA==,iv:dpUp382in9kbxSrgYMDcMmx3ZEazYf7GJZ2S3xEzaKI=,tag:Z8G5Qe9V9Gtjj8dQ1b2tuw==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:qZgWbAg=,iv:f4K2ifoDSZBe3Qqv/khYJ9Ngd31Fjfj3zZzFLvZZ1yc=,tag:xgoYSBAjBW4cIj68qPL6Ng==,type:str]",
"serial": "ENC[AES256_GCM,data:Hw==,iv:4un4F2h7s85fqTHGCvtK7MM+gzp8dVuebR2Izq6WM/Y=,tag:7OhClZk5ULITak12brDJBw==,type:float]",
"lineage": "ENC[AES256_GCM,data:+xgyc/BZCcVwQovGI93kQrRizW7NN2ZipNhBV5BxgX6K2DvS,iv:QXu8TXS1Lni2DVCWAthWHUhzq5Jv90mSyDG5w12GJfQ=,tag:agIHU4YlYsJFRA80ngbAWQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:iAV0dw==,iv:nCIuv7ByILIVDSErt15B6YvD0cgJ44j975XaJG8r6ok=,tag:KFywgAcTvLYujJWI2Py5VA==,type:str]",
"type": "ENC[AES256_GCM,data:km8JzYLCIexXzQ/x8gqzA40N,iv:1tjRqBoYq2EDVKNzxbOhwQl40t5QtoNiFjCVDaeVWCs=,tag:8HWm1I16eU6NwLP7LjZn6Q==,type:str]",
"name": "ENC[AES256_GCM,data:8uWLf86gOQ==,iv:FoHzVg/rZaMJ6fDy2ulGZk5HW/Z+WdSPLUF+MejXFMw=,tag:I/QJnvOoQg2k0F4TLdWs1g==,type:str]",
"provider": "ENC[AES256_GCM,data:r5AwsKwFm5yZWUkhfVYm43RejoU6l6PNc+ZGZmhn4QGV76N4DASZxGiaSVHwrKbx/A==,iv:/ePQM7dE6UxQekuyDEhx8fRamKGp1IV8izIcFljFso0=,tag:uw1wz6sSlQjiiPkMdA3CTQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Xw==,iv:sK395apdFy30Bdr0koLPfLVuMXim826Yn8+8jCf11l8=,tag:ZFg6eUGpdEheMWVlXkyH4w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"created_time": "ENC[AES256_GCM,data:EDmj36FxgVm73Q2iZ4N1zuozPJ4BazLBVAH5BtHl,iv:wCOuYMWY80UiX6FCqyNaXFBvzpcRXdMOkQ4dRpWXIGs=,tag:38dCwvXRQMrwrMGL8enndg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"custom_metadata": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"alertmanager_account_password": "ENC[AES256_GCM,data:hdKtHlQiN0zFJ4a8oKeEIAQeLNg=,iv:3eUqBFKtPhO1aH4ykpmXSQays4PtkkoesPQNv2SeaCg=,tag:L8xon2YwbZ2DCy+tJ1rqLw==,type:str]",
"alertmanager_slack_api_url": "ENC[AES256_GCM,data:zEBJF253b/J6prjCgDSRnu/OBKg7q5MU/HNqOeH34EF9y9aWystleVnlaEGiCuXYLbfDTBwruFuvCAWH63OPiFNZHeLKJRLxrlFNF+WH3nRv,iv:1kt7tuhLy7psINygUN5H5gL894kA73Y5+oENrvb1U/E=,tag:FyPuPZggYAdTCgGzK164qQ==,type:str]",
"auth_fallback_htpasswd": "ENC[AES256_GCM,data:pbQ/H+Iiiu+v9epVeCiqhV1H9b1+WMmePN+0xYZLnrqsj5GdqGXDfZjFn11W31LUPgrHYuGZvG5VorNe+DMOhr6s,iv:1GjTXxP4bh78Sd9dCKcDMFad9aMwGdZ06zoMXXDWnYg=,tag:FTwgq080wM1ByZg1ku2ykA==,type:str]",
"authentik_postgres_password": "ENC[AES256_GCM,data:t2a2GXKUzokTDrB4Ko6e6Q==,iv:pZ0WHvQSuTIunabzvGhNh3X6pY+h+yxFRwwagZsQhMk=,tag:LQQZ/z77jQnz/PBO4ySjJA==,type:str]",
"authentik_secret_key": "ENC[AES256_GCM,data:gwJAGKoXA0ciXKj/T3UW8xayZsGlAmlPnNlt5jjhMeIXrblMb1DTJnmNcY0rl79gTfFN,iv:MJnEhOyGSQJmik8fxz5kc9fwuMm1IE1I062TTSvdQ7w=,tag:XQBkUvtKZlaJsuBO3pTgeg==,type:str]",
"cloudflare_api_key": "ENC[AES256_GCM,data:soWt8LuvutrDT9R6rbolc0SIgsQ9XG2T+lPSmIUNykw8SoQuGw==,iv:gNZ3dpfmWUAGNjN+QFUXSbzuzMuUWcBUoHAE1Koubvo=,tag:MLpwKWUf+UzccwN5icdqQQ==,type:str]",
"cloudflare_tunnel_token": "ENC[AES256_GCM,data:JIyQQSfOCszmt9glXLC/OciYLsMw1qcziVM4oO0ZVjlD5ybKSrau1VZPMgP7nDpBKRzvYckVe69kCrysbUmNf8VWEmNSc3aDR1aA6Y+Aci+RX7a/iFi1F5zqTr9ifFjmok+LSpInvIbvxxCpuUROXjPqSdADdPxFPg5CTLUVGnTn1zfyD1F0FPZflNbGqDppIoxQ3budKiwpXHwxO9no7I+kEX8NG+YkCFI3WBlPMb6U3dVtJiXJbw==,iv:3h2VRoXmxkJruY/QQwQPk5AfJo3u1w72a4NMp852Jjs=,tag:/bxPs81S+c8nMFs/j6lZxw==,type:str]",
"crowdsec_dash_api_key": "ENC[AES256_GCM,data:gcON/qQJlQdR9vJBKAtvc5/SVLFGtlImgomVRQMkkp9lfEu+liF/CrlWnA==,iv:F8j8yQ/FbWVdPgMBJOOQEY1P+ozkF0/98lbDZZyYeuQ=,tag:3yyn3XxWiMYhnpqIAmIVJQ==,type:str]",
"crowdsec_dash_machine_id": "ENC[AES256_GCM,data:3QkVF4imtX6vJChRGjbXMCIsL1FiBvY4zuIw7lk=,iv:jtmKQKkCmLjxbjrrxujUhCG4i6+EN0dfTaMg9zKAvOE=,tag:bXuP4YoslAES6jO/Z3LEBw==,type:str]",
"crowdsec_dash_machine_password": "ENC[AES256_GCM,data:tUbCix4Rfp0ihUXqF/U96si9/iGC9IOzpsLAzd+fZ5rkBaufYSP5eUvmqtGcWVU6IzMPsiwoLQavKmKVLWTR8A==,iv:W6w20AF0ErqchFjBnujiYQG74poz12bYCIN4RGZT2M0=,tag:9gaguN0GwTzZhc2sEBogfA==,type:str]",
"crowdsec_db_password": "ENC[AES256_GCM,data:xpFwAyQ21l3nzYw6+uA=,iv:kMGbXyUszF7EmeNm+UpnO0Y94wHvwgHp79CfnghgXJU=,tag:soDU4oPK7WCvDc5K3YXuOg==,type:str]",
"crowdsec_enroll_key": "ENC[AES256_GCM,data:eWNo4pclXLKNG5K51VNmiIO0MG0wUvs/Aw==,iv:IudvvbweuStz3mk2ZVVyg7q8UtnAPQ1Tu7qeAOrwWQ0=,tag:4LQGXdUuyp0BGH/2nVkEug==,type:str]",
"dbaas_pgadmin_password": "ENC[AES256_GCM,data:jsD5i+7yzFvgotwuwZjXvBxPIHzzt+WesMIZPxgmwJM=,iv:9/vNhfOjgOlBHsaFpI4b6NA6OLW0HIGjfXr4K4Fa31w=,tag:oSijcjytC1b2ioR3edG0ZA==,type:str]",
"dbaas_postgresql_root_password": "ENC[AES256_GCM,data:DBglAlyBhQylGulXDBkQCbOMoQZj01ttcaE=,iv:hx4c8eJLmovoYT81P05d2Qz4jLh6I9I6XxWY65c+HYU=,tag:xjSYIFj7VODT+wXLVoPGBw==,type:str]",
"dbaas_root_password": "ENC[AES256_GCM,data:qVLry79W0KFvSgdNCvnTsBtrhneE2CswAvui1w==,iv:4IwQybg2FBVAFKk/pSNa9oOBP+xCatsb3CorgleQldw=,tag:hu4mhMClYZYRk0Tdi3t7Mg==,type:str]",
"grafana_admin_password": "ENC[AES256_GCM,data:OBvP7jVYpSPkMn3no8Kuml+V1LI=,iv:ATAqMisBxlk9qZMCwooepFTJf4ptCf9Bi56IVGb/5HM=,tag:gNma3zrWJ7MSrPuvPBiPXA==,type:str]",
"grafana_db_password": "ENC[AES256_GCM,data:XeK9HKqNoiQG171gFeuJVtd1En1R,iv:2W2cS9TgoZWmz8gw+ZzvjVnud3Dj9JvqTSfx+z08BEo=,tag:UR1UX8pVvKMi4XNAmhvdjQ==,type:str]",
"haos_api_token": "ENC[AES256_GCM,data:h2YNiU5CYiCco6X48Lobx01l6AsaOdMBHcipG5OjEK+mT4CozV2fz91lHZEENBI0YhvXdxG+iH/RA6lYmeRQKM6IiOoJEUOgHEbxvMJbGUVPUSPie561EBwaJmDMh4LxgcPXpcYaiDa7aA0afXiR7pdzm8FJTr7dxTJtzIS9Mgsratlhx2A1YxyboCGa4HFEA1gC5npDqe2SdJ1n8dwFFH2EQ0SneRvYpJJDzyNUmpywzQLqRhbI,iv:8LLtA84eHU4HrC8W7JkU7HNlP8xI7QAw6eh/uPotjfI=,tag:QwOVglM1dQuRY/GMs4VKCA==,type:str]",
"headscale_acl": "ENC[AES256_GCM,data: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
"headscale_config": "ENC[AES256_GCM,data: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
"homepage_credentials": "ENC[AES256_GCM,data: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,iv:zWXip/JZoH8pkdYgbtb01cjWSOyoo0QK7dpaJWdZB/0=,tag:iaEShWdgBm7SX8Np5Hg3Ag==,type:str]",
"ingress_crowdsec_api_key": "ENC[AES256_GCM,data:c2gWcdDVCXlfPrzHGZDkz+KWS5qKPtYVuuoD17yChyQXWNqpSKsQChtAcg==,iv:8kILwTt73nAVZGnYq+AiTCxNeiL5lwLDWr7tLw0WIws=,tag:MSevPVhIIAOorJGhEy/tvw==,type:str]",
"k8s_users": "ENC[AES256_GCM,data:TDK9N58dSFEkn1YjqA3RDZ19hb3ZgstsNuXUfT4i4Y6dZgR9ro5MH+rYLW4kwIQct1k+c5xS5FZJ/dsd3qb94gel5k2YCyiwW5cS4Ed0f34eQOgXxJltu3GZKKVzW96I852wR9TEsidprMqYBfDU5fRztT5lmST18CZCq1zqE4I97xJ3nhKjoIaALzLVHXhuQvZb6z2Ib4RYTDB38BMg170jdTVSzdq8gZEh2KE=,iv:j6JBp60krG/X3ggHbZCzTHH3sukG+gcZicXzEgPpqGE=,tag:e4E15/1KE6sE1fJQINAAUg==,type:str]",
"mailserver_accounts": "ENC[AES256_GCM,data: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,iv:fN/7wW5wKmNcXs7iv63ERT3ryuVxEEMc2mPM4TQtQbk=,tag:GYZx5CFsOUb2HyX7I+pkxg==,type:str]",
"mailserver_aliases": "ENC[AES256_GCM,data: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,iv:9MimQLHWqMhtOa+9VLtjbVYeMpMMf2Bm+WlYdN3zJfE=,tag:HHO2G0fNx6KdiPtQU3jH1A==,type:str]",
"mailserver_opendkim_key": "ENC[AES256_GCM,data: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,iv:l80ETPOCwnwNx64uTc3qA8m2vszVh2pb0WvP3XJMMGE=,tag:2xAbB59MkQc/jDHutvRvXA==,type:str]",
"mailserver_roundcubemail_db_password": "ENC[AES256_GCM,data:1jTfuhEdxLUl/cdvl0Y=,iv:teLJ/ZH12aNGJOzuYh2jItJw8N6/TR1G81cma2Voc14=,tag:xcAHS93nCC+lB5nfu32RDw==,type:str]",
"mailserver_sasl_passwd": "ENC[AES256_GCM,data:bbrkwnlny4uHnxRavrEEFcIMA2rqiYhTzTq2hrmAaOp8DdMfCGWWzqLX22XhFDVV9jGV4umwCBG7W5zBDmtT3o+58Rpgds10HRyvkXiEiEiNx5u/4iToHFc6HVQRnqSLrUhC,iv:V7y2ufdzKFXo4xI8tm10q/o6eLnJEFsmA96Z5BrKx10=,tag:H4SOtVL5jSri8W/HwCf+qg==,type:str]",
"monitoring_idrac_password": "ENC[AES256_GCM,data:SFVIAjAk,iv:2IMfk2plxxS6Rn/Bw0l3fi/4FmI83MBUyBji3Lsesbg=,tag:O8fmr/vUCJEawHW3N638bg==,type:str]",
"pve_password": "ENC[AES256_GCM,data:pussn8DT+zFPA7JbbyWUJcZRYimAlEr+6IwyEg==,iv:1ZgxGK+vc5piBJ8JhTkaD32pGEFTAvi7wDTnuHvbkRU=,tag:mTaYYkTlg/4/gRqMOR0JCQ==,type:str]",
"technitium_db_password": "ENC[AES256_GCM,data:rMvGGsOQLyNBka4wyVw=,iv:CG+GtgxYijJ0Bi/WJG6ZXu4Xc0tHiochNNGugZU2AXs=,tag:Wn5SzlC6H0HeEuVCZhDkWQ==,type:str]",
"technitium_password": "ENC[AES256_GCM,data:uhnjkZHkm7xLo1c/nC746Ybn6LmHux8=,iv:UR65WgCjFc/CzufPj3erN8GOxymTbOdrSzK1UWMLmgE=,tag:L2/bwKcu+weSqyTjg0etTQ==,type:str]",
"technitium_username": "ENC[AES256_GCM,data:ipAzaZo=,iv:cJnYO2mDspSNQEXRSq4Xq8a7HJ80e3icl+l8oJ8oEGY=,tag:MR+ztjhsnRmZTL7n/naDDA==,type:str]",
"tiny_tuya_service_secret": "ENC[AES256_GCM,data:0eE34I5OQGH4d5jwST1gkqMBajEawQ==,iv:SxOdpIl8PN0kDr629/7fqPKsH/loa/RT1MAlIMPJpKk=,tag:5xyJD4Ls+zTjP/Bmy0D2Dg==,type:str]",
"truenas_api_key": "ENC[AES256_GCM,data:NJu/eS6jZftIHl4s5N/qYA3ENLdEI4S3e1Oig4qbL3+1gcfP+j+Ty3/A/znbLlrep8pzdZG/DM88SmZMBWO+dSUf,iv:G96ovUXpfd31lI8ZcFniw8+h0jYeeNv3uAU2Ze1/hss=,tag:kORF4ZfZFHLN4oXTJkWCug==,type:str]",
"truenas_ssh_private_key": "ENC[AES256_GCM,data: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,iv:aWBVOmCBZFiYjco5H5WLmYyjRXorWL4458vp4Q8duJc=,tag:YrTDNnW55+6hlfErC2n3Tw==,type:str]",
"vaultwarden_smtp_password": "ENC[AES256_GCM,data:3bZ8t0U/aP3rQJeTq4CkMzU2Qpg=,iv:Js5P9ueikKSf1VciBtd0jLsgcpahr4qwUgKQQCuKSE4=,tag:YFUrC09vmBi7q0s8gfgGKQ==,type:str]",
"webhook_handler_git_token": "ENC[AES256_GCM,data:bfSuJhwgTtMgfz5S+r3723S+dW0J7a5pA9ll0kgIAtLftnkgl02CcQ==,iv:nXRmb32UXTht1+fMc4yttprzpS5+/yh0jSbUSsLH9GI=,tag:iG/M4OdQ6XWW8jy7vY1hug==,type:str]",
"webhook_handler_git_user": "ENC[AES256_GCM,data:2ZqQyiJnH//etJUL,iv:N/GIowj34aijjIpYLHW/7nHB9yk7Y99d/502z84vnms=,tag:UVP1+ewT5IZGlUl5/kJ09g==,type:str]",
"wireguard_firewall_sh": "ENC[AES256_GCM,data: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,iv:Z3MsB9uedsa0yAbTtxxWxYHTM6bXAMYaB9pYDRmMH80=,tag:aczIwqKbganA7Ov01Pynzg==,type:str]",
"wireguard_wg_0_conf": "ENC[AES256_GCM,data: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,iv:u51sDPTCuLrcxbEN6DXI7ZmjIzfjBtSj//jXNjyjoH0=,tag:5sXroxPjQEV+DP+7VLJAAA==,type:str]",
"wireguard_wg_0_key": "ENC[AES256_GCM,data:w0Ic68xe+HshpVnh40ywzreFXPIsGHEQNpswenNuXPCG/YD/+E3Zvhp9KzE=,iv:CKdvXKANun0JR7TC+PKvP8h0J2pKR0zweW3DSun9FJQ=,tag:qNkTdlyDouBRE7qS/Zm+mw==,type:str]",
"xray_reality_clients": "ENC[AES256_GCM,data:g/gFF5m5dp4ay3OEPXbEFYf7W4SrzrxsmqKo7nTUTp76yf8T8sDzbhfVGTg0xjc=,iv:PVAspGMHCzMAFQ9Beazwcv+XUDU+4v+SbKBcxrDAku8=,tag:+WY6TNW7YjJOGeYEROezgQ==,type:str]",
"xray_reality_private_key": "ENC[AES256_GCM,data:1Mn3i/FhtTc3KnrTV9voNWEi2vomhiz0ybRZZkgxLp60M+weZRx3YRpk+A==,iv:WjKTOkW905qUEBWd7/4ddqKIXHkQcswmiAgHvEKXKHc=,tag:5r/UoU4AKSCzAjMBAYddgw==,type:str]",
"xray_reality_short_ids": "ENC[AES256_GCM,data:D4Nh9vnAyHMrlrOZRgYvnHC8coted2d7r8wjWHYMzFyHcAj5zKtLG8UGGvdgjq1CzgHpEfCs73vSbXDIE3RPn84=,iv:R4NTKoyHW4d+9cmyeaqloMDOatZyaySgpBupDCY5xKs=,tag:TC60d6rlbnuIxLiLGm8yHQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"data_json": "ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"deletion_time": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"destroyed": "ENC[AES256_GCM,data:noK18/U=,iv:SQOfzY2TOmmnZUR1BWO4OFAYJL8osBy91LBfrWX31yA=,tag:Nn/jM6TDRNtOoKmVEQEf2Q==,type:bool]",
"id": "ENC[AES256_GCM,data:eSwbVSX4vDoM3zYDyhdArsAuFsc=,iv:Cm4wldqOrEuHBVRRWLvY65v4uqZWL9uEcpQd57yJKMM=,tag:aZmLnKPzYXqFl2Av4ukD6Q==,type:str]",
"mount": "ENC[AES256_GCM,data:LxJhewJC,iv:1qJZno+aQYqDVCTRYB66dYUGHx3k6npTV78aWfYQQtM=,tag:pMdziUdJapAZl+GDTSbdjQ==,type:str]",
"name": "ENC[AES256_GCM,data:BRnURIoWSjE=,iv:T4KkR6nqfbeufx9LzRhKgf6EX1cDUetoURRjI+tVJAs=,tag:CY+hlcCvMJJBdhX5bKOURw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"namespace": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:LcI94Eazb9Yt//3WXNvHCMPT6tY=,iv:VteMeODyAORTl5yB169tEvQ9ea/kSsflUFhLcTJFI84=,tag:/qelN8WXhQEUAA9wAi+9CQ==,type:str]",
"version": "ENC[AES256_GCM,data:Ew==,iv:RU8S3blDl1f6axF9x6FP7KCWm5S6DCctU6nENjC6Fdg=,tag:7Sxdr6xIjFkNZAH2oeloCQ==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:HcM4Il9z7cuA5nhycEIxBQ==,iv:rxjbMFQSXJg9MOS6wyJh65468KFPhR1fFXgKTo+IHzw=,tag:DWnPchD1VMjOV/yLi//HJw==,type:str]",
"mode": "ENC[AES256_GCM,data:kX/LDGfWdA==,iv:7VHhLox5qflRAV0EJqhoebCXTiVwIu0poFDQqdqYOAY=,tag:yTQvOqisZPv184/OpewEFQ==,type:str]",
"type": "ENC[AES256_GCM,data:1RsOCBVvn617urdwwSpvFcs7aYir,iv:x3VrtEGHPEeYIc5uHVrvd1KatZTDpCT5NqZSbHEhtdM=,tag:mU6xf7VcixiivGmRpwionw==,type:str]",
"name": "ENC[AES256_GCM,data:uwZQaKZhFIcg,iv:rnnnACpY6/AVxFwTEWOkCl3zVpVUood4kRbxmzivjvs=,tag:XDPdeEkPgsbBQ4WbLiDOgA==,type:str]",
"provider": "ENC[AES256_GCM,data:C8ivJIivPTlTZMSwx8R+oqUT7ds4CQ0vEqAw9idl+UDMxy9Mmy44tshaEgrmNQ25QTu7w4PB,iv:8Czkfng1cy4G82LUC0DsgQ7ycYwhqQx6jbtbLxFIpf0=,tag:RY0Y4KWX863BBJZXuzCr3Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:KQ==,iv:3TxBl5Ih6B9JnmHWtExtsIGQeqXaveqhfK0HLNS00t4=,tag:O1BDUFRvUzle2sqR+j5z8g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": {},
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"setup-firewall.sh": "ENC[AES256_GCM,data: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,iv:gufJT2USSN79iDYLkKG4nOAW0CUptH8DVYzAAFNYzz4=,tag:KQCt1rYrNqr4cNlZM0I+CQ==,type:str]",
"wg0.conf": "ENC[AES256_GCM,data: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,iv:TsAAMv5uWUwg5n7jj5q3T+IynL1ccDZyJdxPcptb2tQ=,tag:EDOd3uW4AMxyOF1vAPOUPw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:EmnIh6KH+d/gil0eTHLUQY2C,iv:crplJPeWK6saCEXn1HNjLEob3xCxbrh3bVTSPcmOejw=,tag:lOH/rR/ZN5nSOSOovKzXzQ==,type:str]",
"immutable": "ENC[AES256_GCM,data:SEvOo88=,iv:9/Xgwn/PCDtx7YHHvIG0SLDR4Km3zOKV/7wZ8MciThQ=,tag:kiu1c+pLS93DtsIqiW6aoQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/match": "ENC[AES256_GCM,data:eQk31g==,iv:/yD/LaXNU5EjOsvF9TVKlIaVFJP7PC0aeHziMhDVF6w=,tag:BbsDCUY1QxLZNUt2An2vLA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:wQ==,iv:4a+lVL31651bzLRcEhI4T9Mn52ySTsBjXkXYnlBJgRU=,tag:0uJ2NUunaRVarAPRW2iO2Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:GgSDAGgJUg3+,iv:uDweDJSpVuHbMKNi6YxdhwNL5piFagjtUp+FFIWVFB4=,tag:Mx2XchgEjTGQXCAFXFzrwQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:IHAf+JPuiB8=,iv:YzDqn8WkWClM5lG2Gyc7ZP+p3Ogess1YuTCKKgPJL9s=,tag:YaSEsCf+r2tgzoHfW6YAkA==,type:str]",
"namespace": "ENC[AES256_GCM,data:LyY0jIJjSNkm,iv:1S2naHcs3rGyzZhmagZejwnD22VbqMEp1xlste6Kaz8=,tag:nyJLxw9ofA9tyhx64TXB2Q==,type:str]",
"resource_version": "ENC[AES256_GCM,data:KhDU3ySRrscG,iv:FOCswMAvs1X5pL0mUfOkFz30RzNVd1peOIcPSpoYl4Q=,tag:/0VaRdVCtnGdXkuzR4DA7Q==,type:str]",
"uid": "ENC[AES256_GCM,data:5czfjUhrGuurBSOrDnVNTTHIcRYYxGuCO4P9xDGr77m5ZDlH,iv:8sGQL7erhNOOOmVOmkKO3ngdNBq2LmNpEYfMx/9UjNU=,tag:IcLf9grFiwiynGWAA3hrQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:T27eJhUons8=,iv:Wbapf+PgDxtpwxKcf8Cij+zvLZrZcvk0xp8bJbxhM80=,tag:htT8hmFENDtG1HcsYceDbg==,type:str]",
"value": "ENC[AES256_GCM,data:RLmztQ==,iv:alXWrwKxl6TPg9QhP7kdG6EulnEGhAfCJaXMM9FdR/w=,tag:eUWKvHivNIKGpLNnnd8NoA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:fijGMSQ=,iv:73JRiUMlPx6GJD3JrZseh/4rBM4aioIlLJgHtlylgJo=,tag:J80s2EykUJalr6LiaEbXxQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:0P3OQ9zDVnTd3Kgu66v8slU=,iv:5V1sO0ubilvmXJXXJk+rqD9h0a1+aYIxj8MWijxaENk=,tag:CdfdVcYxUNIJvDptQUd7Bg==,type:str]",
"type": "ENC[AES256_GCM,data:qprgrns7,iv:4OlpmWikKfg5yYgpkQ00k+YoVi5OY0NhT6HbvjH0jKc=,tag:xoVjosmczFiwVI4kks9VTA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:LWbcWmt4bdA=,iv:3uhjONgI1bldqWca0Sl+uq85DJltQlGfqGaZ3QepnQk=,tag:8Ii0xQ+BuZ5tnWSZcgUGhw==,type:str]",
"value": "ENC[AES256_GCM,data:ZCMLdA==,iv:KsiVmsu4Xe8dGkn/KIUolB18md4VnF0YvLr7hIk5PtM=,tag:kzxoTO/JOrfJhMoUvdP+gA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:CfuWpAs=,iv:X0uhE8soqe61f1iPgWsuv5gDQ2ql1gJ8hzhIwGw0wiA=,tag:YXTWwdTTuhAPw2U2cwiE5w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:ATivR1ANSV4=,iv:9RY+3GUaKWAiqnbmJ/wAgqJW7Sxf0GKR7Pe5x4gpSY8=,tag:fBNm6axlNVrIUAWjuT37UQ==,type:str]",
"type": "ENC[AES256_GCM,data:wXcTET6X,iv:FEVMnGHNQ63gLwBBbWyqtM0bsRreYc31EfMcepAZ4AI=,tag:xeepbCqqQstAMKr5/N8zFg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:LGRrrps4o84=,iv:AO9qrk5d90Bw0SitVE7KDXGE8z41TWFbo6x2OIngAF4=,tag:oXUaf1k5cIRmzC8dZzClkw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:VndA1KuggStNA9idKnIjkK4u89CtuptFgCk/E+SRZQ==,iv:KIVcZ0LKt9uFX7bla5KghJUMtBq1xFAHtUHptSlQjAM=,tag:rHVVoo8N7aVujPlw5K5UmA==,type:str]",
"ENC[AES256_GCM,data:Z/zl4OzS5uAXZ9DZ7EMCWPqBtNUOBBfKgE2uu1GMNGyQoffNk5QOJC0RJCp8AKk=,iv:SvcckSfbJm1Bk1jhP7CtzB5Mq/rP6KIMhnpPn4S5hmM=,tag:B1ZElihnFrivMKAacpV61A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:frON9F3sJQI/sD0JLeXhCQ==,iv:1rCbJHeSwUYKk1iQeFswrqmlHoF/EUDVQM64ENNhTjU=,tag:mqoAD1iYQ8f5ca0D6ZIfsQ==,type:str]",
"mode": "ENC[AES256_GCM,data:WB1EDCe+ag==,iv:DbIJTk0G0euee+m8ApneO5gaoEyp1LZCUcPEkNvRha4=,tag:NzXs5RINcC0noIvxsWdzNw==,type:str]",
"type": "ENC[AES256_GCM,data:e73qDYYBC7s3SShBinfp2Md9UViI,iv:YnRSC2ySYDteWdceQd+R0TQLzolQbazyuKuTjQX+tUA=,tag:sbQniQvjl9cmxSeJXgpcwA==,type:str]",
"name": "ENC[AES256_GCM,data:7uzFbjG6fq5e,iv:wlgjnIOjQt8PKhv2s56rlPJrxDXTh8Kmv0U+h+OwxWA=,tag:vy6451OILAlLHUYfoW1sbg==,type:str]",
"provider": "ENC[AES256_GCM,data:HJgAdhlD1IMkA7ORZjHVguDJUbNx8tbGhDNT/0uAh/gH+12oqqMWdEvWDsFhTMeAp+fhyWlp,iv:1ZXqKpIiTtrPGRB8qunFY6/5aPPA5KiiNd864DMJuCg=,tag:DbbKJ6kK9j09yd7C2rLntg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:iw==,iv:D05NauIbGYKegqaQtqhX0EVinpoaIEDEPUj4BXl7Dzk=,tag:i6W4lZjNlySfIm/l3+Zn8Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:ebwBGls/B0hHF0QO4RBtm6UZDw==,iv:GEeySoUnhv6SBeN3jtkrVcxj2S+PIhfIwA7Gc6q/Hfs=,tag:J6wu8bGAoDl+kwGGBhacCw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/search": "ENC[AES256_GCM,data:w5WiDQ==,iv:aGbAzyuefDXGwvqIYSYiTPCMHuXTbiNivabV0dj+r5I=,tag:MgSyjQ3UVig+8tIkbMLylQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:osI=,iv:/s8eHQ+e+PlKIcDEnCgRvStqRujVPB8AnwvwrTLRtWc=,tag:4aeptbnahTGlyO5C+WOLug==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:gGaZc4fx3pYB,iv:CaHEQ0I6lygIb9T5Alfp0HAsxmOehZwAs0oHRZocsk8=,tag:P4pjRoEJ8BHwvldto1nP+w==,type:str]",
"tier": "ENC[AES256_GCM,data:YT61huXq,iv:enFYbOFkaBexL8YIJA9mbEHKG5ckxxHcwvAjd2erG+s=,tag:7T1SalDAyqvc5VOb4AV/7Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:gLuAG5HuoJ8c,iv:6BFdUw1Q+3nW/NXoP6d0Q64Wd2Badlloe7oSe+92dbg=,tag:/TWeHAAEAB49OtZ76O7seg==,type:str]",
"namespace": "ENC[AES256_GCM,data:FSXZQ22qAmKI,iv:zvHUQwSoTMgYIu8LRNLoHM8ZvdZkWZa5vkcpCwMBaLU=,tag:+skonqi5Ib2fLVJzHYsEsg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:/qQBxp3J0GxO,iv:C6WLbcIrESZPpvQK0+AWzPsqlWUN3eFs5gY2Adwu4kA=,tag:LyQpNYL3cJwZpvEAGcHk5A==,type:str]",
"uid": "ENC[AES256_GCM,data:OYJo1zdvxFXoIKW5EwWb2ENMe4A6sa3Q3SrPlaBFSMUHD/4n,iv:CjMFqSxq/oxnrU/KsEgjSL3OpfMt4GHLI3yWic4fbyo=,tag:Vykoah8RB6yXVSrdxoLo+Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:VA==,iv:a6H4EwXmMAyEF7dDbwUrj4L7ctB+/+jBCvHtg2c7bXk=,tag:Nu8+E3Apx2SCh1vYKMk93A==,type:float]",
"paused": "ENC[AES256_GCM,data:WrclQ2k=,iv:qQFq2OFomQcraMpVIl3KRP0c1JEEI9ienziH32Wtm64=,tag:JFnOaJFMmS5agBw2dorltA==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:iuX5,iv:yTPXHlYMh1cUToqC2MgFMPn/ZayJ3v7zGiA+EA6xaBA=,tag:81YGQezzcMRS3FSPg4aWDQ==,type:float]",
"replicas": "ENC[AES256_GCM,data:cg==,iv:93Z7EAt5Prk6pmgxDA9rpEdXHQ8QeDvQVfuUseAqG8A=,tag:nYtR8fF5X/k3hl/z7GDogA==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:YlI=,iv:J2Tb8Y4Jhm1cZaLQa6SYRvpjxDzHJVMNVdiz9/RPBMg=,tag:upCJ7cVboREoTTrGQV/nBw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:aDES6M6dOL2C,iv:mj4R5ShkjmJ3xJOqpkB67y+42LTLAvDntkSeAjoHwkA=,tag:MjVxgF+Wwm1x89UiD7/Kkg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:5A==,iv:pUM9q4+eDNs1ETgrrHtz/iSMWKGUP3eT8Hlc0C5gYS4=,tag:pLtvVWMM878v8RnJP5n8CQ==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:sA==,iv:D/bjHIjgrPAJEPJ8Y5WeeYZFrQsFhxjgWtL3SeQYNOQ=,tag:QulHNed3tLSq93HPCKBa3A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:KmtDmVi5MRFfn8Gv2A==,iv:TImbGZLV1cskSgs9RTGy0oBIGM6pYrbCZRtaX96ispw=,tag:1DzdbdqWU55wQtmCVJhCCA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"prometheus.io/port": "ENC[AES256_GCM,data:By6Z4Q==,iv:uEBhVzBeQmW7r6UyYGztmL5kS5XRwxIdB8JKCcuTYlU=,tag:wG52ARS2o392BVbPujXwVw==,type:str]",
"prometheus.io/scrape": "ENC[AES256_GCM,data:W8Plbw==,iv:bbwnrkSQoAg1WncH6Jcf+kS/TE5wtiuzfiiwdmWNdyg=,tag:UtD0uGNegq6uyCknCZPuxw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:CA==,iv:a6da6+SjVfkJFr7XnuhiWCvcf/3Qqym2AZ1MI1Bf6gA=,tag:pnJpKaZ/JPgBms+S0FGkVQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:Rp9zec++YqE+,iv:rbG1c30JkqovAfjtQCY8lILlSf9KviNWM7va5UGVCHU=,tag:hRJargeVaCaZL78yHWnC7w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:dg==,iv:GFuBrEAbkpvqb0/LL7FbLOG5Sya4k69J4CzF6wcRrd0=,tag:pEY6dWFC36KG4s6nbKcwpw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:0Tz1Tg==,iv:TDAp9lgvDEqqSb/GLjtHB5am62PF2Wxnfcc97qp6rxs=,tag:IYkCOr2spwuQL/ccLIw3IA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:7EhUFA==,iv:/lDU3drOlGIz14j2PlfARbkZmUAab3tsLaAdlOuG7x4=,tag:bsh1Lg+GCbaUDL1Bl6i+2Q==,type:str]",
"ENC[AES256_GCM,data:Lxs=,iv:Bxlu/Zr7SZksXJAuRORpyvH1OReA2C9qCCNstPRDLNs=,tag:nDPAMh6WZZBtvVmTbgwxUw==,type:str]",
"ENC[AES256_GCM,data:22a+zSKuk+H6,iv:6kkgFtfAbsBfdj8tyhrDgWPMJc6SLzxU0jCVnFf5Piw=,tag:7LBk3sbiU2V9AD1ntR6e5w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"env": [],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:dyO6m/3z1Ol6xSoxwaxmASig,iv:2AA76tb1N4HqVSVfI/pvMtSoT1atToZ2DLca31kcVBo=,tag:3luzscHX0afmPo/feMFYyw==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:1F1cyySnpz88uvQR,iv:NEuDxGJI2TI/XnHX3pZd3MMlmWnfGcqKTQ+bAnMnzUE=,tag:xalVTKgNbvUVBUGOBS6pVA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [
{
"post_start": [
{
"exec": [
{
"command": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:c8+5qIuTaHs=,iv:cWJTbyy8RWdeSh80wOrL0caiG74x1jq0ZPYj57Y+HT0=,tag:bQfl7s4RZwU1Br6jlRP+mg==,type:str]",
"ENC[AES256_GCM,data:Lsk=,iv:Nk7GxV7imQ+vP6gYa6koxw7ozcRDjFgWRth4x996jbo=,tag:uB6TdngkAmsXeKzBT1fXaA==,type:str]",
"ENC[AES256_GCM,data:nyMP,iv:sc+P41YhAF49BlFpeCkksM9O/R667+HHg1kljX6jyEo=,tag:OpDbPJTDC+cCq8qAe82XoA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
],
"http_get": [],
"tcp_socket": []
}
],
"pre_stop": [
{
"exec": [
{
"command": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Cix23EZQ2Gs=,iv:i+h6qyV5vBPgQNu1yNfEj8tDUYosXYvdK/3D04Oe3kE=,tag:8HMev9+sQ+twb5yBVO+kGw==,type:str]",
"ENC[AES256_GCM,data:3bdWUQ==,iv:SKKE9hFexO+KjROhfioSdRAOC7HFm5ylDNWTES1nUNA=,tag:+k3PBg7ZNaXpWGEmjHlgaQ==,type:str]",
"ENC[AES256_GCM,data:FYBF,iv:FdU2KYlsa2MsWtDaZAJGLtiTS5Vbkc9u0ll9VlPERSk=,tag:rT+TQpFZFY8GFaxbSY8hqA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
],
"http_get": [],
"tcp_socket": []
}
]
}
],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+DKm+/efpgPX,iv:yzXf9Yx2WQpGzNDr/iY2ZBR6URE0ZDPJAsvwqwR5Jt4=,tag:GlEJVrQ7muHLcsNpWqUt7Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:NNB/wlo=,iv:2MvleLu5NYV4VFzmZ4/bSdqbkJMWAufB+yXqYrlQj+E=,tag:1Kp7gCtxLcnpsBP3AJBZJw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:EQ==,iv:a1gNgMnT7RDRrGXoG4LR7nYN1h6and5/n9zagD5kw/w=,tag:S/HapllyyVqquC+fN/AVpw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:DSL7,iv:28Kbgjrt8VvO4cGSSBocDZRWifIk0mUF1FWJgK1pmqY=,tag:vqzCT8BwFxRlr0Emb742Xw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:acaD+g==,iv:cw5vM+BTM3N35ygg0wuYKyYDZZgIgxgBI3MT/KaMMAU=,tag:LOdPWIoWsBP6LO774WaSGQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:fPWz,iv:B7aDWe7lOYxTCnqH7nEmgPCW4VOEr3G502dY9Qp0Yh4=,tag:CPHF2omJK5xCd2I/JFXRTQ==,type:str]",
"memory": "ENC[AES256_GCM,data:GSCo2g==,iv:suCxlnclP5HdwpEW68Ncd3veRe3v2ADcGZYn3KRDO4o=,tag:z+wJna+ZtKWeULb3ExZocg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allow_privilege_escalation": "ENC[AES256_GCM,data:A6WY4w==,iv:jaEzBM2bAfTkHmlQ9hGx/RSY9JEMN7LpxUIhNPneupY=,tag:HLprlW8u0gE/OJTJs0BU1g==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"capabilities": [
{
"add": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:MRI32ZNJOWSt,iv:PcnpwXLhTsMuiyUh5xhQ8SAKrzzG1PLc8j2IK1ODuO0=,tag:yxB63PPeYaqWFmJadK7osw==,type:str]",
"ENC[AES256_GCM,data:f+dzte596zIrYw==,iv:8Mavr8KaAlEZX6TzB66j5dIsuE+xIZbUBb4WCHV/BZY=,tag:+MeGRQS4ub0JXY6gaIQtcg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"drop": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"privileged": "ENC[AES256_GCM,data:QML1+pY=,iv:WRrReGSkE6QjJRqFh1quYGRt/qKJER8PNn8F3ptbmtg=,tag:cO/u/iRNZqAbryJiP15Rzg==,type:bool]",
"read_only_root_filesystem": "ENC[AES256_GCM,data:81XEPgw=,iv:vQA9V61+B2fQtXLC2WKit5G89zhJrGT6MNfwT8HDMCE=,tag:KApcVfmQ9lxXMhNNGkZyZg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_group": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"run_as_non_root": "ENC[AES256_GCM,data:o3bXj+E=,iv:jrw2AyzjQkr+CwuaDwRHRzuLso8HNEEvuL6MMfA+5O8=,tag:niBsP2Iy7lo/dxx4/H+wNw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_user": "",
"se_linux_options": [],
"seccomp_profile": []
}
],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:6SKDNGw=,iv:VdrH2U02wYQJ1/iN/eAHLOyCK0D4Bbb0e3c6amq8uas=,tag:j8UTBzaULzmYIIFRENaq9w==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:gqyCvqc=,iv:ZWZQlHYpFPGREpVihkyhy0AHM5b3q/0DsdfSfJhdghA=,tag:D8F6AxP1fSKofvjLMrgtnQ==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:0zaxRcvGwUQWnDxEQIxAYkXTcT0=,iv:sB4buTgmLtvOAabRiPmUqiXO3jqmZGU0X2GZUIfGuqc=,tag:hGhrOm2PwvJmarIGYVe/Tg==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:irsIbw==,iv:2rtA00MWi2268yO+FoLOb+8S9EHAMdcKvA+4TGIQfsg=,tag:l5truh5YF1+W54VA0CKYUQ==,type:str]",
"tty": "ENC[AES256_GCM,data:cO/5HJo=,iv:W5d+oXA4Ie0IwafjrnEknX2SDpFmb99x7XLrU57DmU0=,tag:9hgEV/eb9GiSRVcF62btuw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:hsvsV8fV6Fnmwb48UI4Zz/Dvt+vEbw==,iv:jo4rJqHQpwDVZFw1hHLA/CoCUW+l+IK6AEUuA0It7a0=,tag:iE3Wt1umxR8emp6o45yX/w==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:D1Xatw==,iv:S71KGPegAtrzVnhv3PbHlWLHze7t7xKbEOebjx960GQ=,tag:INj5cs9fNxPMuJv+lKZFZA==,type:str]",
"name": "ENC[AES256_GCM,data:HkfMIB7JiA==,iv:wR0F2aRhW62W52p/klVMFZtWxTgTfJHLRW8vBEKSS00=,tag:mtyk0n25G35X8V6eSOzNKg==,type:str]",
"read_only": "ENC[AES256_GCM,data:vzG5Fvs=,iv:PSx9OQyN/KdHatibFYwHWr/wXeNRZHqqI8a8suCxxoc=,tag:e84xrKnBhCImXgNVJ3p51w==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:54PuubVY4w==,iv:w6rKMPYfKUegbbS/UAHqc/3QlS5OrBARWG0AsLgWHjw=,tag:uZNrkDOACGKqC++fHsEPkw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:e65BYB9JjHUS/0Eqt9RfScRmME4q/Yk=,iv:mDk0uUGhWnaduv9Et4PKCuNKjUEPP7n8RvaGR1XRI7w=,tag:ORyOndxQgoX2VuNO5MJI7Q==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:UXEt2w==,iv:GwxdHf2wf1S+icS+uG+aWTZE3sSR3kJ+WAGEpZHHXc4=,tag:4glKyWzaKyJnOdSEfHOY1w==,type:str]",
"name": "ENC[AES256_GCM,data:wU3S0f6fteM=,iv:v3Sp/m7lgvKZ8Sscmy5l6pJyfDIVYxZHNFbdFp3a67I=,tag:LYpX0qa5cOUaNgNQ7/ZxOA==,type:str]",
"read_only": "ENC[AES256_GCM,data:bnlr69s=,iv:ECfptyHoi48uafW1XD7gW06sFPR9D0MOdDzPwFi7Zp8=,tag:fre2Mb62NbxGBrmrU9/YFA==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:pzWlsN9U0WQ=,iv:C5/AXkNHGWzi8OO8midafP8MrJdTOS4c02l2576Z0Y0=,tag:mrLFsRB5wlsNR+vIh2TAWQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:1GuXvkk9NU22gsaHzglggxNQTOHKHUFQ+h1G2OWdJDg=,iv:lJnzruBGFwQgEz141ruNwu0w1TfjkZaE1YnIC86SzmQ=,tag:F4VshSJ7u4Rm/vvNpTVeLQ==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:Wf9xAQ==,iv:HSJ2NOYrNG4Jr44MomKdxrgIsOfRZGPkQ+6F9JCyH3s=,tag:J1Kr4I4Ud+/DwQwhOdO3rw==,type:str]",
"name": "ENC[AES256_GCM,data:jUpM/B/Qdh8=,iv:IKW+lscRcuob5djLpHXOrMn/IPKKi4xDiWTVa9oa1AQ=,tag:7pEVLjivpg4khM6Cy9LvVw==,type:str]",
"read_only": "ENC[AES256_GCM,data:XZ37oCQ=,iv:DMVLWtMkCr2o9XawMVkjKMs6ZufcJFGGizM9yGk5zLs=,tag:qGEYy+CRNnBSKQZ+CvhsZQ==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:fRlykZ8T/ByHnMwH55SX5OU=,iv:ijP96Gtnk7M7dnGWlxTYcv7WpkjvSq9Vaf5L0XCBy+0=,tag:keBdEcrOHgKU8Xc6PGzzqg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
}
],
"working_dir": ""
},
{
"args": [],
"command": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:4F9WIPJcwX4sOEqzeeFpwA4tNsg3yNczy94pF4M=,iv:OpiwLy3n2OKNgPDiGbmVFktgwq8rEiwClS/R6TqWKlY=,tag:UwqFl8QhPvAcSzVUVkzYPA==,type:str]",
"ENC[AES256_GCM,data:10k=,iv:02CCMGXnQGybHS4G6lmwjcDW9In6cQp89eFIuNW+o8A=,tag:GA1YwmKz8lgb+zohxKcAgg==,type:str]",
"ENC[AES256_GCM,data:2M3mlg==,iv:CEZsDeG88Rv1icY20Nv3rePTteky/SS04s2mZ4x+D4Y=,tag:IsHMtOC5oM3HPHXykx7FgA==,type:str]",
"ENC[AES256_GCM,data:LGU=,iv:oFRL15bpVt+MuxNE2JW82n6iVLptNGOaQkl4vNFDkcE=,tag:Yn5ZnAGZ6OLenmZCTn7FKg==,type:str]",
"ENC[AES256_GCM,data:YoO0Vw==,iv:KZtPNhr7YKiBWOd8+U030+T5BgXgA4DNNwR+yFL+N0I=,tag:k5TMCutiEIBNoUqTiG5XFA==,type:str]",
"ENC[AES256_GCM,data:9NQ=,iv:SCAGgTqtPckU7QqFhuL+W0ZiK6/wOPPjPSmuysf/Xkc=,tag:wplzZLE4W9UtjViU+Aaglw==,type:str]",
"ENC[AES256_GCM,data:myA4/FdMu74M1FZx02I8Ei6Q4iyaUKI=,iv:ffquXcWwlKm4s1SgDbJGze56HNM3J16FoTuwgP1fGHI=,tag:kobSG5Q+R9BgVuTHgn0uiQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"env": [],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:SHxA3blny1ywxJ4Jm0ceMTHlb8KbdWbrtxFaEjyulBn/bT6vn2JfGQ==,iv:uhyS1SikbLDbDY9qr2srLImt4Eh5y08RCR/yxl/yEpY=,tag:t7e5DZtTrmNevByTtxWtgg==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:XjmMwuY6CJsOUV2o,iv:eS/owtKuVcZYvtPthmrMMz6sH5d/sojkrk9GwIoTSPw=,tag:bmxmNM05B/wUgNL91kuaJw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:EAkRTgUjk1gZWtdMeCk8IwhIUQ==,iv:cEqG2vcx6P7MBWb62HyOc9dUqjqOtihA+aRjLBxdfWs=,tag:MzWPtyv/kmU5uaCnNrXSnQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:bHW3Nw==,iv:JoHNbWrPXtq6tGzZZcR1Xk+VH9pGOJ7VVpiayRN5rTE=,tag:FKJS5yV3nMiDe77L5SQ9Hw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:lA==,iv:QeSf8InOHRiKkmPbRPsUWQy3IR8jeLNM+R3NAxa/eGo=,tag:eUoHs+6XO1NwxSOigh23Mw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:I5Zv,iv:dY4FizEWJ52dUcIpQ0g/0TUjKk3T+e/cz9w6ydGyGS0=,tag:ym0peVFhkGUvQpP9PHzFTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"memory": "ENC[AES256_GCM,data:v40OQw==,iv:Q0PHwbzviAAr+IvuyAPDq5HbIMfJWSiHYtW7Q2Et+HA=,tag:Ff21uVfeaP7g81UcbzvHBw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"requests": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"cpu": "ENC[AES256_GCM,data:Bp4s,iv:cnSpRxKY3M9ZhyDfEQHcmrxNSI7obPKZyoeCEr6Xl/I=,tag:t1GXU05213UkxtV2kZ7csw==,type:str]",
"memory": "ENC[AES256_GCM,data:ab5x0w==,iv:wYGmSlbiPWG3bymwGuvdIVptnA3Nc4k2XCQq0znEonE=,tag:N/7KFrpLrWCZUiIeN1rm/Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"restart_policy": "",
"security_context": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allow_privilege_escalation": "ENC[AES256_GCM,data:xGoirA==,iv:7HBKuQEbA7cNREZYl+2cNdizDuZe0ZQNbTIOu7C6UtE=,tag:bioYSawPm/0+Hjzjg3EUmQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"capabilities": [
{
"add": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:+CTP/JAG28xZ,iv:89jdNw2C69T/LSDNps2BChbbXvlnZXmn8rUjy4sieX0=,tag:USFy4m8Z6GoTUEyyzVDmBA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"drop": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"privileged": "ENC[AES256_GCM,data:arH04tI=,iv:AusnCb3UL/BtLzXKucxqFjDjFul7ZYzFO1ieOkdW8pg=,tag:MSva9B0h20dE61ub/GJTeA==,type:bool]",
"read_only_root_filesystem": "ENC[AES256_GCM,data:F0aSnrM=,iv:gT+Df8wTc8irjKvw8SDaen4luqGRfmlwlm3fktoHZx0=,tag:VdC+BwAaoYQdp1SDQex0Iw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_group": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"run_as_non_root": "ENC[AES256_GCM,data:yuScGvU=,iv:v940ZhiaKTqicfEv8nVrVaoYC572159CyqgBgYN75+E=,tag:KIPcs0qM3cURJ3vdcXIPJQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_user": "",
"se_linux_options": [],
"seccomp_profile": []
}
],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:oM10K0U=,iv:1JCkUQ6T3t8BQoUDayuXyOd7qtKrlUuoRBZPeq5tV2U=,tag:cnD3QLY75QXCdE6wyfLUZw==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:BsDFjx8=,iv:cw+42Z3Vu2e7gLD0z0LJWMv1+ZvzlCrtdQ2xGZ9bPAw=,tag:gaERiBCCIknQuNbMXS6YyA==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:Lr5yKeqBAGqhi3bqwW0ILf0Av7g=,iv:jP6DqRhIWJMFyJhFNQ89fArVEseh6yVF0n+bzJPEuac=,tag:MUvidE3O4u3Ad2jw2iWuLw==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:yjmKIQ==,iv:JWUxG4Mw/pFAalrZGQT/kj2BmHvBGQI2Do5qujRpBYc=,tag:uQULcLmZvJyaH/J6CaDEfg==,type:str]",
"tty": "ENC[AES256_GCM,data:pw6zXTI=,iv:08X/1tG/eM/DCoLR1CXcr6N+nixlOyd6rzSGY8zKUnc=,tag:Zoh5h0DuEjnvzlm5E+wS3A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:J70HAu/ByGtePKjByeS8SKKSoXaUsfQ=,iv:LW8G0ovvq8MGftZAuS8kXAcl2cIPOm9zj+sncjImqJc=,tag:42JDR6WAtpIjnwpfwCOAng==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:Mup3/Q==,iv:fxcB+3QG37Nnuie3larvx0PjZ4b4fWgNhrvmpUQHexU=,tag:p+mVw/Kqwnf1Be7IhzJusQ==,type:str]",
"name": "ENC[AES256_GCM,data:52isKRjMoNU=,iv:CvsWDU5Nd384tprKDfMmTegRzJDWL4qdyFElW+JYz0Q=,tag:gvzcQrGNa+1R/BPr7m65Aw==,type:str]",
"read_only": "ENC[AES256_GCM,data:Ab9sVM4=,iv:o+YPepXfF94r4IogEFrNyltMUWJKE6u5X6FigAkRFZQ=,tag:bdeVku754A4c4D4xE7hwUQ==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:wc5YcG6KJsE=,iv:KcionHL4AteqxyiowQJuMTZs0cK5bXO80TGsgrBFhBM=,tag:s4kyujMe4LoVR5VzWUAjkQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
}
],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:65mxzbs=,iv:MBo5hsqS56yJmmkfSFFs1yJpRIE5YmFxCrM5RembJ5w=,tag:byHwniyA7lrQp5B/aRZHmA==,type:str]",
"value": "ENC[AES256_GCM,data:wQ==,iv:n5XnXagRPAFjqgggU49lORReuSeP9S1Zguq5gSB1SUk=,tag:aHqk8N9gJJ105VsFzVYUlw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:F1CCeq3ok30NET7X,iv:oFbe4xbfsdpEp99caNZ8D0fRYK60X8xQ09UkDWdM5Og=,tag:/uR40p1vZRZbp+trel3Yjw==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:ELre4w==,iv:xT8L6oltUc6Ards0IFyOlmJLtXxF23tF+rb3LOAAuOg=,tag:enAmTunz2mpN8jDZfhHTgA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:Fd84IkA=,iv:ADrfjS/RMwfcwr+sV3pVwuH1KP5HmF19ALT7gn0XVlc=,tag:9T86Dvt0M7PoqoPkuBJRYA==,type:bool]",
"host_network": "ENC[AES256_GCM,data:huv5PHI=,iv:iV7JJoS02aZSHoSdaKDM8Vcswnzn8zljpbFhJpWwpzc=,tag:tJhTCuyEPkGMO/tBHbow6A==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:HuH6N1M=,iv:xSv7jvKffR2OihRJyzqmhAAXtj1HAAZky09syKNKu9Y=,tag:beFHraF9M6viHdxYluI+JA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [
{
"args": [],
"command": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:S2XLKv7vsg==,iv:oNd58YEmOLs+UUZEbQ+FglqBvOfJ4vklrzzbCgCZldk=,tag:/RzJUqSc62ASvSo5p++xYw==,type:str]",
"ENC[AES256_GCM,data:ZJ8=,iv:HBY7rOY510PmeoPGWeOwZOMecmJO8CmIZAYMj1jCg+A=,tag:MmtMFyfvHi1r5V7rUoEzLQ==,type:str]",
"ENC[AES256_GCM,data:f4QhDV+LPFJFOIEyYpkOJNOfWlNi2J0kZ6BKAcRhtMWmJYkXxzs=,iv:C/H/BMWruelW2k19urrYiAE8oOawJr/o8fETD5++Ax4=,tag:iL3kEy/+R2Af/NScpQ3Q0w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"env": [],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:CZrJ5ERbgA==,iv:ZWAUuXcgrH8fHkv088U6KTO42HyXSTszPHjAh4z+Cvk=,tag:g8yekbBow/MDyoi5j0tPXg==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:R0ROJ2+a,iv:wsEwDOgTa0r1FWkQNkkqEspJTxa8gzHKhIymHC541p4=,tag:dcvKfNW4Nz1fhW1Gp2Qxzw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:wqeLCRlmK47hzW+C,iv:Jd2OKswProw5GD123UYZ61EIyWhTqQiWrzhgpJhmNjg=,tag:k2Fp5NIXjV7E0956zBw/UQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [],
"readiness_probe": [],
"resources": [
{
"limits": {},
"requests": {}
}
],
"restart_policy": "",
"security_context": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allow_privilege_escalation": "ENC[AES256_GCM,data:ncZEoQ==,iv:33kQa8uuHSMwtyAYrVMdfdA3Bms0kHseyYfZF4iNVKQ=,tag:CFuY8bBaGSnaxMexNS2yDw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"capabilities": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"privileged": "ENC[AES256_GCM,data:lD8ESQ==,iv:9Z8QKzsvyhV50WtBqQORvMZYjD50hKxKM3nLZL6WqwM=,tag:tr8Z6ELWRHWc4YPVIlq/uQ==,type:bool]",
"read_only_root_filesystem": "ENC[AES256_GCM,data:whXrc3E=,iv:4K349DD8fyyjxe3z24ecM33qeM0hyo/k0WAGbUCed4Y=,tag:2k1XBLM3GaEU163H116UZQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_group": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"run_as_non_root": "ENC[AES256_GCM,data:Y6Lwkkw=,iv:GSU4ALNkyroupkWdY861F0xd46TGr0CNKIKkoU90lyw=,tag:dB7xi4VzpidtRX6n7HoIgQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"run_as_user": "",
"se_linux_options": [],
"seccomp_profile": []
}
],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:4zUjCYY=,iv:eOIBTTOd7E8UGfIpuigS2s9FlRstE+r2kCXST062Dqw=,tag:6OKL7b2yTUnllKV85EKZ5g==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:vD+dSyI=,iv:ojya1n3R6Sp6PtZI3MHLDkIV6RN5w22QA0tmAP7lg6M=,tag:TkiHvfpIicFgbU36TJ6x8g==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:28Y6T9kSCzJDqam3WZUu3TareP4=,iv:KYBmmUzE6jEdCCxlgKA9OzCJJESCy830T/m7+N6J6Sk=,tag:sGC6vxBsYVbPd3C2o+hC7A==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:LrvFSw==,iv:HSu3GxNR4gjm6IcAxp2c3+tcsw7wbK2fYNKSRVMYUfk=,tag:lyFGrVkcTCAmau9fjmafSQ==,type:str]",
"tty": "ENC[AES256_GCM,data:LErGXv8=,iv:DUzEThj2SwIhzhLG5wkuNlU/IjxMB7Yzn59mpZAeU4M=,tag:aNl3HHaejYmz5YKRG0FsKQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [],
"working_dir": ""
}
],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:qt71Wk6h,iv:LfMQdCmz6sEHgZGdAx9ywnxpVhQZXuWN4hmbtbCTehE=,tag:0bHRI2mr+U8rHKlSz5JrpA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:NILalJVK/zF1Z8AeAdFj2DU=,iv:EGWvHv26gx4fiPT6U9IFzShTvwri4LwlQNrIsNZWO6U=,tag:AmBNdENR1c1JCEDUiB15zw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:cukhniA=,iv:2E0jQjMGhpQlHNs2e1QoJAQumewI+mUImLwWODUhoS8=,tag:dpMke7UDVGedcuBxI/t6xA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:C8M=,iv:rIyYQiAEbAaJxe77XXcQ4JO4qdiaRxXmyPtIMYlHhv4=,tag:EkiEWHv3HMPvH3vJ6dQulA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:M1E/EBRQEA==,iv:wJXndqIEsfj10LaNetnmnMm/UF1lBs6YMg5wAv5a/VU=,tag:2D8eQ5nuGGZa6GlDTIA6Ng==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:scnrSQ==,iv:IAF5o6qKOhvnmDMf/RlH9b9j54j7gHmw9ZaCqhe5Mck=,tag:YkkV6psXjUIf1iitwilY4A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"optional": "ENC[AES256_GCM,data:XsgDz+g=,iv:O+yVgh7iSkE21X70jW7TJ2/WyafQVQLUcZdaCDlvg54=,tag:kwK/O5kW/HLjD4jvBN+T2g==,type:bool]",
"secret_name": "ENC[AES256_GCM,data:hPcgW16nVw==,iv:gaReEfGHNPsfgkto5aSPlLtQVQiBgChTmLus8nklzaU=,tag:pmY3QoAaATv1PvDJYmZ0GQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"vsphere_volume": []
},
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:Fm+edg==,iv:hITF1kymJZJX0cZxcBHR4aBZ+Z2yozSzzQneYwFFY5Y=,tag:/DIEsL6MSImrBztxqxa3uQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:BxYUf+2ou1M=,iv:gdCJPDnixvsW1uV2+Ug9THQMxo6HVfOWCzndfnA5DYk=,tag:bYsh38UDSckNRByjsdoGEQ==,type:str]",
"optional": "ENC[AES256_GCM,data:KsLT4Uw=,iv:nbi7bMZdzYF5qqZM1m7xI6qP/hE28W/IRwdq/h8yous=,tag:v5I/gs5qFUurTqM4HXvaNQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:JphC+VWNdpY=,iv:j8knL1cg3u/eC0lX38+cNvUvzjsGD/7xPuS3nrIodrM=,tag:jIcI8Afwq9nohHDbd0Ebgw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [],
"vsphere_volume": []
}
]
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:gfM6qw==,iv:+r9rnbfZvaZS/vrtPR7gLjd5mUNjePmM3Au7nKjP6aw=,tag:a9a4JZFwIjAd/jwkpkop0g==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:ENI896sYfRnYy5i/c+hHX86txhyrah1lztcck1x8iSg9dHa/ic1VYQiidb8xv8fvmmi3aJbn+Y0QvltmkVpmTDIl21jWo/k7bQjsKhKg/AhzIuysjnLWusv5IiEUq2u6PEHLg4G/Bfsvqj3pS/oF2AgxsqoISFS3oRvTyMmpWbPPKTBBNCYaUS5bXw3e09GWPF5hPF42O/RZtSp2rBaIn8BU5gSjbzpQ/TJ0QQ==,iv:erepbjemKFJSezvhzp3GODogzqk981CcW9aCb/CNBmY=,tag:w8sdGvQDyuVFIHF/D6m/sg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:KXsV51TyiiUnu9CFUfuoH8d6EdyjPUF52DIfVbW5UtfapRZMZ+c309G81tOTFkw=,iv:NoceS+x+y/c5tLNOcNQIQOMmW5GjU/mNxxWjHIdDC9k=,tag:NSyVN+mcvX1e0YapuamErA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:dTccdu4M9meqgPvVbvzrxA==,iv:iEN5QkncQNa79irnUPpHxjSXTqoPo0nZGdBWUCVV/8g=,tag:cjcwfJJlXLBMWHkTEcSnTw==,type:str]",
"mode": "ENC[AES256_GCM,data:Q41OTkRXHA==,iv:NgkHZTymexKVQjHS+g/e85WJSQQPCPAYjLvAVx5Z2hA=,tag:DuYuQF1yGEj30uifFtoTpA==,type:str]",
"type": "ENC[AES256_GCM,data:QD7kLw5xQjulMdvxh7TItBAZsw4=,iv:FqNDL8i8NB4/SSanzNqsk9kDHnHXfBRijwmkCdYxBPI=,tag:xIhjp6u7F+Xsa6KrJ3K8fA==,type:str]",
"name": "ENC[AES256_GCM,data:eYd6KVWNrU8D,iv:96YpwaUsJDDJGNjpmZbaZOrTAzweOQtjZaBZ5fmw39M=,tag:hkckP1RT1cn35dy0nRc6Vw==,type:str]",
"provider": "ENC[AES256_GCM,data:Rpc+Otvw224pRpbYI5qskH6tzN15Y/7rWmwfnZh47tuBJghDhZC1xiOqo3rlsNIXyvDi1i/e,iv:CC4fgnFBw3Rj6xXBCGUnQ5+bCtr/ulCSqZx+rAHuxOg=,tag:rz1XnpoYmldxWMVwB71hFA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:+A==,iv:OokNFfG5ElhftOp5zkHdG5tz4yDF6jBT7CnneGeSm6Y=,tag:gOnadOvveqznPEbxGh69ng==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:JqPct32vzbDj,iv:8/fgdkrifHYHVGnfswgkFfDgNed3Kpvc2Nr5phaYFAk=,tag:XMcgQie4xs4XAyJo9FqcnQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:2g==,iv:zKmt4Z9sZWK4JJfVWU0zd9kTX7sFAtQyYFCz9J95NIs=,tag:cKuyK/c/Tlb3IY2hdNlZTg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tier": "ENC[AES256_GCM,data:TJof9vwS,iv:APvlbBklwng1PcxIXHLgOQDfhZ+TOPS63RI4+NINDlI=,tag:3Is7C9pMjig8S8IzJPuOTw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:DboCF30vYcX9,iv:LKi6QcvYVtazHRRZPGtCh6KuCfVWikO0SPW0tbnfaEA=,tag:zMYGfXQY0VrNrd55+Qw85g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:NQ5UElkd8vfk,iv:VMk8M4zsw6Qh+QE9r+dprlRc9KKWX8jrPlRwCkbqVGg=,tag:UgekBBCE9nEQP1ugJM/UhQ==,type:str]",
"uid": "ENC[AES256_GCM,data:OAsASty/vkhzcLMc9nJA3dEztZNhV3p31bKXkfWcNw3ATYLf,iv:jPNBVUwlUt2mCwLkgJRwSLRn5OBMt+Fcra5gWITIwog=,tag:yeuec2R4RSpC+4UWzW41hA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:UDGA8J4=,iv:Wj4f6lfms105sEdmQxr89jC7grhvKPpSH+vm2SNrgsA=,tag:voFcRLyl0ZtFQq8egEZStQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:yXWljiSJw1nQMcJzPEd9XLQlQW6La1PCDL0koTjLZk7OW0/E+Z+wB2HRnM3aoTHkcKajpLF2TT1feeN8066cG3eTwAbiv+KD54rN4VDwzqNl3gkTo89Lug==,iv:5IFAM0aMApsy1Z0AKmqEw7Ef/HEzYjpMhVw4Qny/QgI=,tag:N7IEfDYt9CdspCDc2kL2mg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:OZTXCilsCcwu2kVojp/VNw==,iv:IB7eyz6WGidJsc8tr+yZH/lXz/k4EnXqI30ZFA1+7c0=,tag:rHZ95qn703vqd8QxYxnnag==,type:str]",
"mode": "ENC[AES256_GCM,data:/5g+a+lc/g==,iv:QW96lyjosjM/frtQnPwe9dDUp37BnnboucU16M5PxIA=,tag:9VhTDZ2JjSV76RSW+zjkUg==,type:str]",
"type": "ENC[AES256_GCM,data:GquGKHS7MSnpURvf18K5JmM=,iv:kMFjRgB41VfwsA5Krar26rZywf+TpfVXByv3X274P3E=,tag:vnVog9bOHFTo3w/GbuueIA==,type:str]",
"name": "ENC[AES256_GCM,data:vzjQynFSwXE=,iv:9nEMqGlqw4w0TzUfDkdNcxBHoCsd+njj5uLWTCZZXIw=,tag:R1btpq9J/6Ijfb/g3RhvSA==,type:str]",
"provider": "ENC[AES256_GCM,data:VNQFvyrp7bH563gVQQP/1vDsYaHvhVgTii7scoBpFEmKgirrh0Ad8aNNCHbhxkeOzIhVlfP1,iv:TRskQtnmSJQq1Opr8nnxB0tbrtDQ0Y6FOAOZJ6DrOaE=,tag:zzFzTlE1+01kvtYmt9R3MQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Dw==,iv:XaxLEmWKSC7E8rnSrimiux+Gj7JzfN5ZKy1JyuBXQ60=,tag:zaU24SbnaCTtm0h7syRq1Q==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wg-ui-config": "ENC[AES256_GCM,data:Y2XGt/gcBWv9F9AK3La23VkFOKy1IW4TsOymbRZaTaC4KGmL9zNGidLUxaUrX0rK4aQj67646LnXSMiv5zbAkfOkBiPuyC2Cc3ROUg45oZxkwdmDEvk510icywDZgPZTH6CgyjakvHF1N4LR6IYUwx5Ai+e/kDafmTsKZzxJHRJrOo1pphc=,iv:gcVlYmMU7byhry83d17ulMnTSTjy/Kx4wvP6s3jSkJA=,tag:q/LCbrUcZcBoj5PUjOQZAQ==,type:str]",
"wg0.key": "ENC[AES256_GCM,data:RYqkYrjt+WmeD6Qojt8ka1p95hBCDx6bUXzegoHH4HGNcYukLiObC/HhEgE=,iv:E9FGJBs9chbeK2wMluUI/5hhPT0Zpjyn2002XYU0dRQ=,tag:J1qCxRKhBKrbnR8agXHZag==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:tdvt8doWUDLeq69dvNRvEPk=,iv:MQp1kBrAWLwrVsoeoTzKn5KCByNvDRgC0li6rmQWZa0=,tag:yLp6wUvq8KY6b+Er41dSoQ==,type:str]",
"immutable": "ENC[AES256_GCM,data:xRaZetY=,iv:UnDh5l12ykvgtEfzzOnEWKUSFIz4XUqy5wY1Ja+yPmg=,tag:5PZMW+AWwm5tsNSH19h7Zg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reloader.stakater.com/match": "ENC[AES256_GCM,data:ToetzQ==,iv:Hb9o7UmPkVm1ybMetto1YeJvgJzjKiwKJGXCb7XT8V0=,tag:7AFDHvOvcv/kq0tuoSaLmg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Vg==,iv:Cmz0yAg6LbAdihF2WZP4S9snxbTiyUVVu6RXfnh0qF0=,tag:K4mWDuZ5LJAvAj6Ib3a3Qw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Jmt9OQidDw==,iv:AlLxJpKdoelDDK5AEbv+Hjv7TthY9yZD3YDi/KNip/8=,tag:m7MzWCxqoyl67adIajBJjg==,type:str]",
"namespace": "ENC[AES256_GCM,data:TDPIG/jb8rNU,iv:IkfsYt+swPrQuDWPxQiu2tBc4KwSIJWzK/0GKTt2rVQ=,tag:TsNrlsaRUpnSJdtTQhyDXw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:H6PAYl16KZDu,iv:FsEQ3e8X8uVnozdeOVR6WzlDC80xFAzOB2vnOg8HeLo=,tag:SgBndSb3ymA6xBv90l+WXQ==,type:str]",
"uid": "ENC[AES256_GCM,data:ylNIFa8bXxsHhQ4/DMPd8aez+PKEyxJzRGxD/Zcf/MUEyoNO,iv:RTXSJCntiJmOp9hcMCZ919UD1BY+/2Fs59Yo+vB//bo=,tag:trukN7Sh99EURth6wRArTQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:kO4igtqlrg==,iv:qzeflSxctg67eMx2oOjZzPM6V6GSZl9/oVaQBSZ2nAQ=,tag:XQv2viAAZk/KntKPox5HQw==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:YKhhpw==,iv:je0+ZaJcCUSaBB0H1kLZ2Lhp6+jeyDa9VAYlxtqKVjw=,tag:hmYOcOY6QZhJ8p/YV/ZxPg==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:yXuaQVH2mPk=,iv:m0kMJOD3qYgqC4dV9aqLc8e2uYPaQ9HtQN/I/Ugf3C0=,tag:QnlxBGthhIddqn86gQFkbw==,type:str]",
"value": "ENC[AES256_GCM,data:9r7y7w==,iv:MvjVxbC8485LdAa+E++V5zoDgGO+z5oIzNLDCWkLwNI=,tag:U/3cy/c0NkYWCn70dlHBKw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:DA38WX4=,iv:TzwRH6hapRxiFULWWy/4NoT5YlG9HyKm19EIxbxMH2M=,tag:UuftMeE5U4UHuDU6R4sVsw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:5VSco8hbvRzuhZur,iv:SOL2VkZvEvqO7w/Mr3GbHcsAyBvBEs10xOVpLrMzpP4=,tag:8QLhsqhEXizmFjU8ewnM9w==,type:str]",
"type": "ENC[AES256_GCM,data:8Ky86tJy,iv:h90Aw/MncsdCjYvUyBlB2p3aya5NN/P00jXKSKNO99I=,tag:+Vhs8dADEb3xDrLDhujzTg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:8ZaUHQF9kgc=,iv:arN93bSTQ3Y0UxfWO776MSxKnw7JH5PE3ZfHo/3WQ+M=,tag:Szx1UY3rgOidattt6/9a2Q==,type:str]",
"value": "ENC[AES256_GCM,data:JMp/jw==,iv:PKkh3Vh94eVMh6NVlKTG9gVDi02RYTe7vwvfy+K/ocU=,tag:VWz55BCm3BSu4qk4g/IAvg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:7RAmaZE=,iv:6P9t+JRUVp6dDqv3DYfYMezZ9nlrRKoAbnPRPsx5H/o=,tag:kz035lcYzDp8frOxfzwCRA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:T7RBN3w8gg==,iv:ZU2knY6DnOj2B4mM35fKjWwXZj97mBbdXSb78z7OyGg=,tag:75jV4PKcaOoSzFGTbWISrg==,type:str]",
"type": "ENC[AES256_GCM,data:kfFS5czT,iv:A+x2M5cS+lxlOhIAOKdtt16kS9RzLyFqrGRs2ymCpdc=,tag:nCftbA+kgt7Np6jqD6uiQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:nOsUQl2umi+8FsgDAdtBg76sTd6G7lnLLVzYgGOMX5w9+Jn+V6Q4kYGK60MaXo6BEstAvfdHqumeUN1sN3Xr+FW7mv8+8o0eqLJxdIDXTaXWbca9,iv:auhPLxBHDSog/pRFG96TMmmohHf0TsutzJN8YRd/nxc=,tag:0RKorUYU9J32j5PHrFALFQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:bZBJEhQpM7cWvJQFL6cnLUbzxCUlzayCC3Rix6KOZA==,iv:0GJSaP/tPxYGjBfH8a8Zon1+JXtC3FEf4VhzQd8Z7uQ=,tag:6UgOyWRYywSvCl3dflIIbA==,type:str]",
"ENC[AES256_GCM,data:rresB/0Aez/3hLWUUj26wNrJyvXTU0uYmqE9+f3NbSkBK5yXFbDvCNPI+Etq7xA=,iv:PnMZgzPF9v6EV4mSZJDFhHN+t3EZnVbpHkFg6dkrKU8=,tag:Q23ZZujRhRyDrEzr7I6qiw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:t/hjggMHfmKO5ydA1mE5iQ==,iv:70NbD1sPqbI9Uptel5wbYlwM3dsnnynfKTuHwwj3OFg=,tag:YKwdgICVz524XuY9+E3muA==,type:str]",
"mode": "ENC[AES256_GCM,data:SCdES24VDw==,iv:ALknlTbGspYvx9Fqhl9pwDUrdUTGbUeoy/zkNin0Eqk=,tag:4qL5I1//aOthREHUq/1MqA==,type:str]",
"type": "ENC[AES256_GCM,data:nsvV1/BPG0N9NPB+/7rlLQnq,iv:MHx7hGB/0ud+qRIDYWKlbhbio4AnMbxA60+edogSALM=,tag:k2GS7LBoNLjx5T3jOS/nIg==,type:str]",
"name": "ENC[AES256_GCM,data:RZwEOYAaCAgY,iv:UXHUa2y4VXq3qR9ux6XRa/ZtwbBSLvPSZZFIBz1TGr8=,tag:OeIj/nSDOcrClFFOMnmsQA==,type:str]",
"provider": "ENC[AES256_GCM,data:z+okeUlxy5BY/5YBQRKWCcInEqCemehl0Ibk0TXIWL65DnJ+wJTGUbkD9jfBvtDBO/+ODCr7,iv:OsORTYaWPSPnsaWQhGw8FcvI7RWqc+efk1q/SV8mNRU=,tag:LFk/QkTUlch+KKAImJh2JA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Cg==,iv:lcgVkYu0xazBkcZPUurOz3XYjbdAsn/0d0TAw1SQ0XE=,tag:e6E0H4n45YZYmQBVSvIifQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:RiWQXXC5nJH+0gaKtGiObzKGeQ==,iv:rwM8IPhVwdVjvRjDGuTgPvqxe4kZa0DaOIN8S4luuvk=,tag:u22iPRW12lXFyAMWmxofxw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"metallb.universe.tf/allow-shared-ip": "ENC[AES256_GCM,data:VpNT4shw,iv:+Nx0vSQd87yDKDeAa/tGPrqGSulBJ3BoPDUhrp/ipo8=,tag:kw35HPiV+HgtmnQlouzGNA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:4g==,iv:L5jGGpRsLLk0iPg0AcBKOgrtj4WrmkwsDMB6u9jGvwQ=,tag:DQ54i5nVl+uQjflMduzE7g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:JWcWAk5+hQqg,iv:r0Wv9RiBukcI08qWtecor8nQn7fk3zCd442fh6SKBAk=,tag:47X2+p+5DuB0sJMxmCoLeQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:amZRDIOR6MW4,iv:JAlTldB9wpX6d585rJuqBvt6P8+al+Wmp0xZfPI16Zc=,tag:LCFKCrYfPTa1nBdz5GMAbQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:Fz5KjRctOdO7,iv:AWEd+3vZELcv5A1uD4/WrlEH4uu12CmdCOPmNLR668k=,tag:MmapfPdu9mF3rOt1FFNN3g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:vGqEsKNO9yVS,iv:a66MzkFo8AAWRA7/6jL++pT8VT0n+7lv6L59+illg9M=,tag:pFdh9eBtmQnp2kEhU2NIgQ==,type:str]",
"uid": "ENC[AES256_GCM,data:xLCkTHCE2soDU/fp9vBgcLrNVxJsOjA5AMr/kd52Yk6FPxA7,iv:oyl849ZtK+Is7s4M6KS/1qN4u+YyRJ4w952pKdHE2b4=,tag:P06CSTad4wwpkf90dLt/lw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:b6Zw1A==,iv:64JwwHmeoyKSVf2cHtgKXZ3Z1U0muLb8tiCEAI2XRHA=,tag:aYSVHJ2g7oVDqbLKyaOVCg==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:ysWNBl5mUx2lBBiV,iv:Nc5BUSHM9yTYhAHURsXVlR8WY24JrxzSO3CvC9n9iZk=,tag:mmpd2vLnsEh0pp8a6wpc2g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:aF4fVq63UsAh23jg,iv:YYfpLoXdIMXdgkRzuAMKXTYzHmIAZIMjjI1jmDhkBH0=,tag:XZYaV8fKNYl7bHBQ5gUyzw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"external_traffic_policy": "ENC[AES256_GCM,data:3Pnu4/cfAQ==,iv:zN1me4aaLVfx5KLqDgp5sYLYlgLrMWu5fk5GbWjSJk4=,tag://ukoJtqguTwNyAmZkmwWA==,type:str]",
"health_check_node_port": "ENC[AES256_GCM,data:UA==,iv:BhvUcTmvoYB6oFjb3bq4KFXw1LByuR3cMn2CZJz9XVo=,tag:lRaIImxxi9kI54/qg9j/0g==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:cGXTiGNfPA==,iv:vVski27uZMSO0ynFP+AhvoUSAnabNdbm22Fkipf6cCI=,tag:NiatdHEr92hNUZKwdmecWw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:BcaaOg==,iv:kLFPaJ9uVcxMQiJYnCyQGJUueKNooghYtVZqRbSHzOE=,tag:vDGy8nXUmJSevYg7pmXvlw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:IejgQkO2He0HFCQ=,iv:c58d8pA1JJV1gSr6zFTjkXgPfGR/gxP8qD2RHMHG/Fo=,tag:j2E8+VuGIWkmv0Dtamb2Rg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"node_port": "ENC[AES256_GCM,data:gCSiT+U=,iv:3i8p3j79XPXEWHZpqjiUV2td2cJkKD1V9nCZLLQU7WQ=,tag:AteZJA/QEVW4VcNk6XGM3g==,type:float]",
"port": "ENC[AES256_GCM,data:Tme0+kY=,iv:Oqtn/kaGeEAurow3/HStqbMidGf1EobtlSaG0/5x5pc=,tag:elJ7r+zB9xkRHla6udwEVw==,type:float]",
"protocol": "ENC[AES256_GCM,data:lBlM,iv:CxkbzQEKCnJZ7phOZj86jSFOD2/sg+bLI0w53S8dfNM=,tag:0f1MakLkCSSw4+6InXGGdA==,type:str]",
"target_port": "ENC[AES256_GCM,data:gfwLAJE=,iv:ORIPMvH7btZsDh1hsQXMax2Mu01yngcmVxgzvLN0UbQ=,tag:DkWAxa1dK4yUKazGopvJHQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:DRNqQm8=,iv:FJ8YGKAnwkFPK24/sMDCpUuSCjjTVOebitxCDXxd/gM=,tag:vkDWJOOWxlvaUtoBJNQOsQ==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:DtVKVf98zjJY,iv:ljo6wb98xbI6r1xnD5fjnpYyUvNjNMDmOX/zxqD5djc=,tag:4H9fjvlnULETNmQIRbKh5g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:m4vwHg==,iv:3IcZpUlhaAyJ1Oin+wlO0EnbmmvrLxBnQ6vXmRWyNuM=,tag:Oqte8RGcIhS6SsRr6oSzTw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:dYFO2HhhnoAU+whk,iv:R9bD0W/ykm+eH9Fnr7OPt31TR0XDNPEUrWXxQjyxMF0=,tag:fZ9Gn+JpgN4rSWDLOvoqoQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:o/fcFtRf98/h3v8=,iv:cnyduTQFWu9p1O5LFK4OKygsmeo9Sv/X9OmwcsiFatk=,tag:7D7Ix6qS2L5E/kDkavOmDw==,type:str]",
"ip_mode": "ENC[AES256_GCM,data:74rH,iv:gpNDefGWkAioiU0J6JplgYFRNRiD2OdEewUaAR9fUs8=,tag:Ocv8qZNn0Eij9owjGOrN4Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:v3YWyQ==,iv:c6v56kILSe+XlxFxKkRx+RbXGljVcZsH24AhhNWUjWo=,tag:vzf6am5gfYa0g6Lk0kxn0Q==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:ssYSxCS577MyRk3kK4F2AJQMXQAyGVbyXSuDIfAtijjt7VAd4y2QkQQsSbt3puMC1WPlsB21D9T7gNTPW4+O/01FeWdord9e94QnG3D9L4INhNIt2yV3oEhbi/1L0kXsXNcAEPaUoYlpQCNXyOtdJravVMo=,iv:pmmBqFdwuMYyqxdo0sB11UhuM9W6Zuxxa0eZtqEUNeI=,tag:Q5UTeXmMEXssJs6IHI1hzA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:yEHioXM5b0DT+IMC+ih5aVf3n2srs8AARdOgI3h7WX9ew/mWT9ygfW2nuiRatiU=,iv:CNs80dG9TENOa1DuAdXVUCgphSZh8FzsB6LHXcedxjA=,tag:a8PX5C+5BHD0Z600YzuKRA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:r4O5EThe8xixC/SsQZr00Q==,iv:bGgF3Dtqv3wT6ad3seLeTvvbpSW0dUq7Y++JC4m3gP8=,tag:PSRom/xod6GrNMxwaG/t3g==,type:str]",
"mode": "ENC[AES256_GCM,data:JpJWXUl/2A==,iv:0MyYuHPpX++QlJBhPtmKW76BKQo/G7Y/YR5GUvbJf0c=,tag:0w5LP7dRWYoSuV3G/ysHIg==,type:str]",
"type": "ENC[AES256_GCM,data:61FjRxknPMTSeUywLHBGdg7Q,iv:vDQ5HHHHFBc5EkXACIDqtJbRVvY8oGrE0d8d+w9+Xy4=,tag:ftDUCzPf2XaUMt2N4RsWaw==,type:str]",
"name": "ENC[AES256_GCM,data:EgPuy9YIipKsv33vA7eoNcMi,iv:18Rnq2/yGzAWvjpcHhUfCV6psmZTdjjYiLglpOrDwTQ=,tag:mhgHoIl+U6nOs0p9HIaL9g==,type:str]",
"provider": "ENC[AES256_GCM,data:pocBToB0MbHxJmRDsAJAqNHeE6PTKuDsHFG3kKFYPBFJHQNwM3q+ukcU/avy9WrtG3QhuWUR,iv:xP1GF+ZI63qVqeSGAnXjvUrkbiMiKg5JhIA1b5VB9rg=,tag:PBPnFaQwBvDM8nrydVbGFw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:tQ==,iv:RmrrweIxkdxmNdxFDF6Gg0Fcp4VHJHtn5Fasr8uJBnE=,tag:i7QEAk5hiMcr/3nnpnOAhg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:Rygaa/OZ0h0kqLWY921UHKWioFrJYAPXkI2aMw==,iv:DqckLCSvC2z0vbDYgptzesY+QZSNWP1nddOnFi81/rU=,tag:+WsZ2rHOFnMYsP0ZnJkmPA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Bg==,iv:1plQm4TzVZFXVNw+W3cckyJCilQ95pN0oAXn5EqWTas=,tag:XGtte049knWXSp0Z0aGLlg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:ijMMwrr1DvgvbaGh4D+MI9oV,iv:yGSmDbgv+/oqpFyR1ivUvoKxVK09GEQJYGIUxPYm5hE=,tag:V1rC5PO7VLv1yRMS8ozPBw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:TTVX7NBZm1Knbf1EFSWcECpy,iv:S1ADoBnrvyCAPu6+OkPWxC/b9wswlKKtUV8ZkrMr5Vc=,tag:HDTlcQ/glB2Mi/4c4WLacQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:+1rFSU2vGVq9,iv:PHhj7jd4DJJuvL1ELPOl7g37XXcxsZQGipmHf/Ldbrk=,tag:wzy1wHwA7J2bCC7Vo5FEIQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:45lWiAzHzw6w,iv:dXggI1aNP0C8qEurGlClk+AVuoTrnc1IxP4mpRyRk6c=,tag:irGZ/K40lJkKnrl1VE+FCQ==,type:str]",
"uid": "ENC[AES256_GCM,data:N+evUbJh6V/0DWNdlabR4LLu+zEp5ziJzuH2ICVw6st6UDhY,iv:+JeuOxU1MvH+GH1VnoAXJOIKakGdg/6LyDJxp+MzlGg=,tag:aCvLvBxA/dlpnJjItkYJpA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:bKM0PQ==,iv:YDccbxgozPfQIJO2adDj5EI7UwwZY7WPJ5EfKlVw7jY=,tag:3owuXtfgql8JR+WQTXeU8w==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:TvolA+gpsyPehCAgMaA=,iv:igMbyHNmV6C1ztBHgKUNKW9sjSh4wtCo2KFTFQJmcmM=,tag:+KlBLxigJk+h5+t0b3L2HA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ubmZHB4RFrs75JMn9DE=,iv:Ytn0U5BQ7+bw2gdyXeoLmAjiUZcb996YUha20iUC6jI=,tag:0GtJjgx3bOhR1ok2lw7RKA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:FQ==,iv:WVGYjdb3FqNFysqsr5P3F/M9mZoWiI066iee3Af8IdA=,tag:SEfIOUGCCoDIpVGlr7J+FQ==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:+zVPVcleGw==,iv:ysoF5ctjX6synjfjfdBs5AxVUBCLN5DECkZiFUVrKS0=,tag:/9mItZDYpAM+J3so4pVw/Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:ohfFvQ==,iv:SDGypRBmWMejPZffB85MLJUC8H4c3Ezzaks4SqAXOGo=,tag:+0hlj8JDnUPzxBzVGpttbg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:to2CEffyPVy8K6U=,iv:CcFDu9QdACvwbg5xrHayQBnL/H5kIS5s/I6hjbicqnI=,tag:SNDGQPfOfzoM2CyrNE/tUw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"node_port": "ENC[AES256_GCM,data:/A==,iv:OawCYuNcNHrtYE03BCC6utysc/N9kKrE6TlG7z6kEJY=,tag:8kQc0VySFzFV9IwGd8zUjA==,type:float]",
"port": "ENC[AES256_GCM,data:ebQ8SA==,iv:j/3/+IlgQwPWUs+lyL8dWNhtbbNe5RgkyQbHdaWD+/8=,tag:NADjRJSOU22jXMV1a/wAOQ==,type:float]",
"protocol": "ENC[AES256_GCM,data:Ylnj,iv:4mva7gG+UzoDFBwQ8l0N05HjoYdV2J9SJuuuRDCfj0s=,tag:UOwLXP0RpKT+gDEBzA6U6A==,type:str]",
"target_port": "ENC[AES256_GCM,data:w/NnsA==,iv:BvHQZ8qLMTs1Sce61606cvlhjqx9rSpDdJRuyEcXaYg=,tag:THX+b2+jZf7VC+pnWRBj3w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:ujEhE1o=,iv:L6/2Kpd3N/oHryufN4hmzx1q6JHTda1ESjmA1OLlRno=,tag:S0CFZikobL275CoVRlTeDg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:7LdWw2JBXZn6,iv:HhbZIzqK4r2YyVOS+dHTrIr8lN4YLk0jqxuKekA/vtw=,tag:KWqHXkYipkGiI9WXbnc+UA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:cSlT9A==,iv:ocXTNFvjr2ATzT733xOMEFBdfC4jIf/TIHtUmnDwkEU=,tag:Q/uGWx1deE5WrUZJV6yMrA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:Zkbk4NZ/suVq,iv:qQs0552OFXvFkBYkB5h9hUCa0521dJRl2MXFeYB4HFU=,tag:gQfzpFUAlKQ2m9Ezbyr6zA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:gCVhjw==,iv:cys2SY0KzjqQeC3Q7+gfmphcwGVwR9u20XhmDFGErkE=,tag:FRDSKcfN0+iE9W0Gl03t+g==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:n3tRgKgtxVdNEDksfWbN4J9Veu12GaNGfrP1SaSdVagU1+FdBqUi5KF4s1HmYQORjbyjAdriqhKvNVReDLIR8miBJfiKi6XCBYpxDR9dIyrEULH2VONLYeH6EA6VRaRJRn2BsIzxDYdtoxSN7mpSEZ6RpBg=,iv:0crV4aeEbC7o9WukibFmQWidqWhhg9CenN+pfD1vLlQ=,tag:YhaZTulOzyc+VaA3UlS1EQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:PidnAHGUuY8F0d91ACcDf4F0fVckuVFJNGZ4vNeyP59iOr/w7MM0T/ImSMncBZQ=,iv:s7DvmXqEFYepdyrG5IJRqUG5RrhBVA8/sAb1G6pazbY=,tag:HURVUm+zACjeah0WjdsaEA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Fo3PzejMFTQ7AxsU1O7CgBhYJHNvMFwoAl2xt7eaejQc7g==,iv:0UUO0hMC6a2ys29KnjNS+oioMw3tS6WiwYP/ggM5T28=,tag:CsPH4HTZ1VF0+u1L2zGgTg==,type:str]",
"mode": "ENC[AES256_GCM,data:Oe6LfWE3xA==,iv:WRSWI7SY7fVnPk+2NQoQmsUrxQm8elJKSW+raLUiZIM=,tag:iEjMrwqtDZgqzivnz0+IZg==,type:str]",
"type": "ENC[AES256_GCM,data:L0grVw2slw2drnw+xpV0VD0=,iv:FOVDymegra4rkpELiUhYnA2SX1jCRaH8wbx+Jp25XoA=,tag:N41zvL1pTH/pIDj+/Ipg2w==,type:str]",
"name": "ENC[AES256_GCM,data:6yZ5SI0J6cjFbw==,iv:cYnIHOX1PJQlao0PQDYHyPrIL6FHoLJrkwFFoBIcZ5c=,tag:nZO/UerHf4GDlVu6IQX8Ag==,type:str]",
"provider": "ENC[AES256_GCM,data:RJh+aja3se71nbvcAEWA5qfSAp/KQ4CCgf1kfOmU4LoLDxSM8m4sVGItJMHGaDym4da7IY6l,iv:tWu6N4ZxEh4lD3wl0QZWUCXnldcjamuVcZK6Xt/g+SM=,tag:sxTyqYm4is+iEcAtI0s1Yw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:BQ==,iv:UhlG1yZx+31kjoQNTbcGAEHIL6SD//VjWa2s+CMrWhk=,tag:hStVAsl5zskgHNfTK25QkA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:oNfgXYMfaOLFqhwgEG2AQxk+NmocfZOfPh8B/KyAu+c=,tag:7O94csbysAdxUmjke7GwSw==,type:str]",
"tls.key": "ENC[AES256_GCM,data:sx0KUiFD3F/ibg58jme4lWR24q6BqYMQRDrFAy2573CkYPhLnOOB3JNmpDCJzyaQnDop/fU97paqoIwyXswA7WOHrX4FvqsCDFaDvQ3rlEW2YZ95Aw2IS/nBMRspB6ZisSbg8zOq3or2j4kOe6XuOE2TNnO8dat0nmiNd4QvElVXBDABcmH8C0e7Vn9j0PQqsdz3weRhY1rljUjY3yf2OHvKm4+OCngZ88c/abz8Bo5LnZM+f9RO+T4XSzGWWZ55hW3HZZXDC/J7xFejs4qa1FhQzJTd9l5n6AL6OcUGC3akHivz9acq+T0AVst7YDLuFw==,iv:NbtT3XNgyC2bRYsOl0aQ4fPmpC7OZf43JZSFBUs8GCA=,tag:DuhFK1YwMOfMjptcHMAjVg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:Uzx0Tj5fI8YIx6tTH61pJC924TU=,iv:g+8yNWPsYyQ4//2Eba7npazWFlX0VFdVclPHaaMy54M=,tag:7DcPL0XMxe3Ql1OaFto0qw==,type:str]",
"immutable": "ENC[AES256_GCM,data:5l9jdI8=,iv:AhNiqzIQZ0JgwX02UFJ715cBXLuAqJE/1Tu79+HoIn4=,tag:XdHC1XO91/bCPrFJYl0v6A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:JQ==,iv:5Si4GRPokq+MUTVRH4ESWnEI+gwTqVqj5Fwmu7tVxXU=,tag:CNCIx35eWt6FpZyfqL93oA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:gYhG+LTKEj6Cvw==,iv:9Pm1kvzBgQ1Sxz9dFIKuUDgiQnI7wpVS+R8WQMULRVs=,tag:l/L986sZS4LhOv3pa7/fLQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:4VU9WO546RWS,iv:XEoc31vb76roxs2o9QklASPEXzW4tzNsBPloNH2mTsk=,tag:TVh47PQTDnRxGIV6U4RVlg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:X2U6kxC79rNa,iv:SzqXTxltSf2HbJ5JoPKM4mnZdt2t8ROiHAvk9QT6V30=,tag:qxui0TDXFMDy3ZM318ztfg==,type:str]",
"uid": "ENC[AES256_GCM,data:8CN+8IuIZ3xRoL/cec5/4oWfoxyczNf8Dx2LS6vixjv7JjCn,iv:JYofLp0UU2zLPQ9hQhqfDftGW07QoMig4Ca46c0dqDI=,tag:N97Ui3HBvvRUKZHrxR1NPQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:1/9OmyvDd71mtRVnyV+UPgs=,iv:nAinR8GT2XUlE3VY+aPy7tfsrkoYiawvQWAbH8VXSdk=,tag:WMnz+D2CHwY1NQ0DRo1+zw==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:fyfJsw==,iv:zbnE+izK+jHhmh9Y4FDZWLPA0p8oxBMNI2p4Dy9f+aE=,tag:AkDTaT9cOGovaSFOcIomvg==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:MYS7dszh8mPyrQUHIsvXC2Wp/k2+gPzYh2PYd4/tcxD7mBX3dHQw1bn2Kd1D6ULFjnYyJ+jqy4Y3CMyXuG8N2PxXIG3a8BT5vFIgiHveCzqQBdsW,iv:jyTVxIatW9Ilg3RP5FhnTiyW/fw/SS7nhFo/SfuiPQU=,tag:QAaBT2wSGa2sFDBO4yN6Pw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:x6xLtAKOa4zmfKyCH1M/NspKJt96f3bCrjmjFy43xTXOLc085tmSe80FmBAj5I4=,iv:T24XDOr5h9TuUmzl3yYK4o3r33REoBvafy8w/tkmi1c=,tag:KGM6zqGal3N47Wdj+VAzKQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:21Z",
"enc": "vault:v1:oZX7WP/bNF2xeE1PTVEx9jHS8XnmNdQYwJNErS8FB06aNiC52MjdNZZCZVM7gMLiIAHUl4Ll/wJUty7J"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBMTcwYzNlQzMxdi9IbGFs\nMVMvZU1RTzZBTXRjQnNjY3JGaE1OcVRodng0CkRkRHV3KzcrVWgycUxZandaclo5\nVmJTQjR6SjNRbXd5dng3bXhYUUhaUEEKLS0tIGlFSGFaOHQvOGd3SjlranV3K0sw\nQnJmcWMxOFpac1M3bExFUml2c0h2WkUKFamSVp8Ho25xoi5tG4+aKvgIOa4Gi0Ub\nR9+OXcJ1Q13Fhb0CP6Eu2/u31znUkanYQKLAo8OEL5DhQ3f5lkPVoA==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeTY1MFBmdkVUbW1IQTRv\nVXp5d2RZOXlZQ0pwSVorbVFoKzA2eW9xc1NjCk5FVHo5WmIwaDdob3V4anNaM0FW\nQnlrYS9jWU4yMkt0M0JpaXhSUVl5djQKLS0tIENYRzEzL1pTKy9XeUp3MjlrQzZw\naUJEdXE4RDNRbUpLNUdJTGN1OHdNcUEKGavJSPrItwFxW73P42KhWtnRhKJNifGa\nJ3nvaFPOGJB2IgI5GrtTMYh+NdMs1nncO+F1SGkvfYVsdznvtVgh/Q==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:21Z",
"mac": "ENC[AES256_GCM,data:q+SK/cKupa7/oq5LwXYT6cQY3YiGEnJjkTUEucr/0Utq28PTKnMSxwIH4FCTF/6wkqjO0gfEpbyyqtu+V1YnltMtlBIIvQCtEkwvpJQALVkCrbQN0Dj5bsqR9A8dLHkPLWF8DU99nudyzKv19R7LFl8Dq8JuwdCscz/bP4/dZ7s=,iv:daiWXd38taVVkukCQ/HKSYl8Uptv6Vk8meqGuw4AOdA=,tag:MS/6Mcpcqr65oHlWlWZC6w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink