viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/reloader/terraform.tfstate.enc
Viktor Barzin 4e7ca1ad61 state: add Vault Transit as primary SOPS backend, age as fallback 
- .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state
- state-sync: try Vault Transit first, fall back to age key on disk
- Re-encrypted all 101 state files with both Vault Transit + age
- Normal workflow: vault login → decrypt via Transit (no key files)
- Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00

148 lines
No EOL
12 KiB
Text
Raw Blame History

{
"version": "ENC[AES256_GCM,data:7w==,iv:TWq4Dv8/HkGWNSGsoPIXRctOh75jnanmKhtT1m5uoMs=,tag:BQ4tSj0nO+U/svWZ0FigVA==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:jxHyqF4=,iv:6o21nHHGyz+7i2SXASQU3D97QqZ+5SZgx7mtpy0fIJ8=,tag:IbqdgPbdkkPMKRazMPsaMA==,type:str]",
"serial": "ENC[AES256_GCM,data:vw==,iv:GVyVy0iVoOoCpt5UdTPPgFGekwDU8rEI0Dftoc7mAME=,tag:OumjcNnt0PJQi/OQkh+6hg==,type:float]",
"lineage": "ENC[AES256_GCM,data:tvekWiPYxl8YqFM/MoTHs34fzuTxFmi21JBS/qQv1alkBseE,iv:qO9AeRTK0MFpv0RPafcebSj5yV/q5ccBT+F2c5OrZ7I=,tag:B+xc3xw8SlXjJT9owJs95Q==,type:str]",
"outputs": {},
"resources": [
{
"mode": "ENC[AES256_GCM,data:bSBtPrkcnQ==,iv:d9bszftalChvl50mvhVNj50yIQBqQqxuYHjMOsF4DaU=,tag:sII80iMnV0x94GSniIPcTg==,type:str]",
"type": "ENC[AES256_GCM,data:7uj5bYbQGesixz39,iv:7srx0QpkL4oz13GZEYY3bmAwfGTptMoR82bylUXA73A=,tag:Y8zekUF82UqW/jlEZICOyA==,type:str]",
"name": "ENC[AES256_GCM,data:XiIvronqSIU=,iv:sfSRPK59psUHhpMox9vUH81Cm9hptGVfwQcUKZSDZzA=,tag:wfC9LM//3Dr9mfoeZhARwg==,type:str]",
"provider": "ENC[AES256_GCM,data:1vutBTtcle5wF77qAymyFCsVQE5JgFhbqLtMYjKwKo2no6k7XfhYGifXP6H0I6Vq,iv:i9MogCqQo4LP1CYlKGa+neRiXTQc6/jVWYidqhlm4Eo=,tag:psmKPxrgui0VEkvVfDFsWA==,type:str]",
"instances": [
{
"schema_version": "ENC[AES256_GCM,data:jg==,iv:HOkK0PtBL+v7m+W1M3R15fo+wLdJxD6zhIqh5ZTxzDo=,tag:AVA1HEG5LJfvqZSyG3yw9w==,type:float]",
"attributes": {
"atomic": "ENC[AES256_GCM,data:l5jtNA==,iv:XrnM8LG7O9ey6tPpsbRAtX+EeZkMeNiixi2IeCQpbvM=,tag:791vRdcCj89iQtyIj6a1nA==,type:bool]",
"chart": "ENC[AES256_GCM,data:8XjXYhqxvUQ=,iv:swBtVp+J6EWMnDd/1mGy3o5VkhW7I1EZIZmUGkwUhSY=,tag:FguwW/PuSoxq+yAiYYQKEQ==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:4BSu0EY=,iv:w/eGoWHhJSCfOiBglTs/GiYyY1dFGVRyplqif7rKfzo=,tag:cm4xy+6VuGFh6BLw4iL6VA==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:PByEADw=,iv:6vDV0PJ1oQfkIdapwFN4RTE1rIH1UaytAuU++wtQtqY=,tag:d/Oxkifzop9fawA5x15NDQ==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:Fd98o6U=,iv:sbee+Ia71J7gbYD9BEXWxB4UuDGg5yjBDxwysn7JbYk=,tag:GxBxP/r5oVZn9DjAJdSzWw==,type:bool]",
"description": null,
"devel": null,
"disable_crd_hooks": "ENC[AES256_GCM,data:9HD0EpE=,iv:Y7nUIEUgOndVEukAnr6/ZiiyrcfzHt0StGAEoj5vo9c=,tag:ikoOhAtjEkqphjjG5RQYoQ==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:6kCEGms=,iv:gLh1eRclKjeDdCZGc09Chn3QAweAslVF7oqiTHDG3AA=,tag:ZqdoQQLMTcBnYrtLKhKxsw==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:hOHk5pU=,iv:A8T4oXhqgjvkqLaiPOOkpIt1h+MIQYDJE8FOh4jAVn4=,tag:n5KPtpjMlg1KdiGSZAUxJw==,type:bool]",
"force_update": "ENC[AES256_GCM,data:yfANcl0=,iv:LsBEhXwykhjPpuA4qjCwXhH24TyuPye2+UahO2dsxdw=,tag:8TcVti69MFDy3e52wXLE6Q==,type:bool]",
"id": "ENC[AES256_GCM,data:QwGvfe5N1UI=,iv:qnIru9JlqGkpKttPsk00FTgaQJSYX39CFDs77taOkq0=,tag:eHSZySbcMuF3jSpOAMbAzw==,type:str]",
"keyring": null,
"lint": "ENC[AES256_GCM,data:zzqof68=,iv:7aw9CQwR94guTAXtGdvYe51YoYS25ArnixG5QsBwQ0o=,tag:l/nBcJhg8rKpWP9Xm6Aaaw==,type:bool]",
"manifest": null,
"max_history": "ENC[AES256_GCM,data:9g==,iv:j9HIP3Guc6QhZRrnlPR00k1ZBE+/CQZDossqnUYAuuk=,tag:sYtB4ceu7jO+yIUSTTMtBA==,type:float]",
"metadata": {
"app_version": "ENC[AES256_GCM,data:oAoOFKneOQ==,iv:ajEAZwXgRDc0YVg0BW0wZfFGfGHzfITzlyE2hTW4A5Q=,tag:tkyOxf2NPuTpY5OlxKmGRg==,type:str]",
"chart": "ENC[AES256_GCM,data:CS6NXDLSCTY=,iv:qfS2ZmgRGBGIaxcpCiLsonKWMhnBnxCTGZqZJi5OOb0=,tag:GjN+PbAK0PKaUTGj1XR10g==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:uVsknL+zTIfRWg==,iv:lJTNr+rO8TOq+jzX3JcfBTi1jh9XW0rkPvKPW7KzhKc=,tag:ohkN4uuwc7IdyTTkL1kYNQ==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:YKFip2lwhjxaXQ==,iv:MW3c8gnEZ21YMgdLhui9rJMqkxabvYw1p0lY6RkU8N4=,tag:K0uyN07Q3CJxDUkev+fcyA==,type:float]",
"name": "ENC[AES256_GCM,data:9EkGNgPi32A=,iv:sDDpWcj3Hft9IT3yQFS0SR/wlNYNvEDRGbbqHqfyHAY=,tag:1DhFt5wEil1T+FhSN3rv3Q==,type:str]",
"namespace": "ENC[AES256_GCM,data:eeIeHCZ0Kwg=,iv:BMiRO3BJQMU6Z0acY3e/OXkDTDjS528HQrfba4zIkbM=,tag:CZ2Ws9hJnM09t/oH4tPEcg==,type:str]",
"notes": "ENC[AES256_GCM,data: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,iv:e7TCOJ75ZGb5EZfzDQFYwn+F7RurcZeeUJdnPcVD5Iw=,tag:NU11AqTwY7sMo4oGhcImhg==,type:str]",
"revision": "ENC[AES256_GCM,data:fg==,iv:7JUM3p4x+FDa37Q5MjqgF6rKf1ImftebiJBzrY6TAeQ=,tag:g6egCcTldj3DOPOGhmJInQ==,type:float]",
"values": "ENC[AES256_GCM,data:DV4=,iv:pYS/L6ZDzXX564zZFEBzKy975omJ/+lpGdSRBSvl610=,tag:BjBhXBfxomz8iCblEw9iEA==,type:str]",
"version": "ENC[AES256_GCM,data:XK8CTeE=,iv:0OUwcgWI/7TEvfAAsUVi79f18Pw0mtlgvlI8sYdyUow=,tag:NWKFuak7toyr/O99LYdrpg==,type:str]"
},
"name": "ENC[AES256_GCM,data:AeIqgYOpNhs=,iv:dH8EEh/MqEikAAZzQ/dk16rYjm/H29wa/fPaRlm3gCA=,tag:2HU838YY+8awE5+zGvOsZA==,type:str]",
"namespace": "ENC[AES256_GCM,data:EYGYn0Tmmso=,iv:85FBFe4rfKFSdFaKe2iUzvdZLe5FvD+yU3i3zGmsgHQ=,tag:T5g/d9SeLbFGO2SYA3KMjA==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:+NEQyLo=,iv:IxfnmVM2ICH2v+c8bWyybDTEZ5tP5e9EgG8xeesc9Qc=,tag:L0Z2nJndHnZ85wYAD5rUCg==,type:bool]",
"postrender": null,
"recreate_pods": "ENC[AES256_GCM,data:9bWGcrE=,iv:DJh+AxltsXBCiNk6+Tnf5rKK8UJxk++2MGY/uN1P+tE=,tag:ilycQ5fMTpJPZmsNeo9V2g==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:0/Li3Q==,iv:2IwIUdx1pVSz+l3b7mIQ88s9lhY+ocnRkAakSYOpMCo=,tag:obPRlUiF3GMKqaYg5TeF7w==,type:bool]",
"replace": "ENC[AES256_GCM,data:Si1wZ60=,iv:7EKREK7jDX9yKYVbl6psTcsxtP4vARSBTNC+GsTiFNc=,tag:9EqCGjTguLt8/mYq5ra36w==,type:bool]",
"repository": "ENC[AES256_GCM,data:mgLC/7AedDR1J01Tw/rw/nl3n1Re7Uf0G0v491CxgKyK1VnN0sBLDwvw,iv:5SbizVbTwnsK+6PobjBqSQz1priMu+7Tj8Ue7kCvI84=,tag:+H5vhcJakI36a96iLn0yBQ==,type:str]",
"repository_ca_file": null,
"repository_cert_file": null,
"repository_key_file": null,
"repository_password": null,
"repository_username": null,
"reset_values": "ENC[AES256_GCM,data:eFZk0xc=,iv:d2ixREabzGiHdCBhrDBJdecj3LR39c9o7aWhjVjQM5o=,tag:DgOK5W0n9Z/NKd8ODsUPkQ==,type:bool]",
"resources": null,
"reuse_values": "ENC[AES256_GCM,data:U+qInzQ=,iv:nodsDiqiiTYtfWq/GwMUHz4PMBHYz7guHDTeLVkRGfM=,tag:G8LsYAB6mWqdtkAhw35htQ==,type:bool]",
"set": null,
"set_list": null,
"set_sensitive": null,
"set_wo": null,
"set_wo_revision": null,
"skip_crds": "ENC[AES256_GCM,data:fRu/rNU=,iv:OkfUh0Hr7qKuJbZ1khX3bv5eYC+sQjWvJxoHTWW7gWI=,tag:Y/OFotnAHG9Z+HkfHtgE/w==,type:bool]",
"status": "ENC[AES256_GCM,data:rhJ5triEkyM=,iv:qffZ8uKN8Yqym1tZxPfbnEb9D663gcT7TbZ0fsnf58E=,tag:eQl+S44CFIdBNYg+CUztFQ==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:DEg/ZSc=,iv:3XO7ohY5Ccr5cML7WvrdQImB4bx7JTdRLG4wwZkKGyA=,tag:nNv3fwIdLXZ355QXrgwMGw==,type:bool]",
"timeout": "ENC[AES256_GCM,data:4YjZ,iv:hPDw4j3PnlGOhoBE+fqvKjncq/RYRpmLfrqBZ2KqC7o=,tag:oJRTwylgoRz4mv5UGC5SuA==,type:float]",
"timeouts": null,
"upgrade_install": "ENC[AES256_GCM,data:QsSs784=,iv:hh0vOu4X1lLk5BSdu1RwLpvZVjJ/b0mHHch5EAIehHk=,tag:kTWkkj8GBLk/YPkYuiu1ig==,type:bool]",
"values": null,
"verify": "ENC[AES256_GCM,data:wbD6UVo=,iv:b741qP8nuMzEP9g/2gDsAHNuZJVrNAF+909qjro/w9Y=,tag:Y2DKkNKIlpTmxcMmm/GcMQ==,type:bool]",
"version": "ENC[AES256_GCM,data:peHmr1k=,iv:H58+UDSz2d3A4mMwZs/FqyBtjy4NJVhXt8v1FAWfpjo=,tag:bqsWq4GzK0J2Qc/lzM+8AQ==,type:str]",
"wait": "ENC[AES256_GCM,data:7UZ4qA==,iv:vAm8NXVuS/bOw3axnUFs5viVcAZ9cut3iZbtKcMxJd4=,tag:bxFrpS+ARiHcCRYAMYZayQ==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:Ag3JClE=,iv:RdtfulLmXe7JhyobGuPGms2GuiwbGWWI0CxRjf/UDbI=,tag:RZf+ws/tjkqCQStf0M2hnA==,type:bool]"
},
"sensitive_attributes": [],
"dependencies": [
"ENC[AES256_GCM,data:qf11lxoU9/35R/ZLklQ8sjfUXmHkqtfD9847YOQ=,iv:n1x4BAZfUKfXuhkS43MI0YDYJtcAO9YbFJLfp9FHSIM=,tag:VZID4mPJTsj0bUsBu8jzEA==,type:str]"
]
}
]
},
{
"mode": "ENC[AES256_GCM,data:b/zqavZJQw==,iv:ROd6X51yd/F9vX4I6OmdvpDXOwv8CuL26k6YV9FIm4U=,tag:WwojPWw4uOmX7YsdgyKvsQ==,type:str]",
"type": "ENC[AES256_GCM,data:6DIJqo90PTe55treZbxQ/3e9OHg=,iv:v0kIBkEAcxMv9OygPbZA2OXjpa+NDRN+yYB3jNsaRfg=,tag:VJ5nwiEQvN5FhZaWfsfDVQ==,type:str]",
"name": "ENC[AES256_GCM,data:Y06Hfaz0Gv0=,iv:yUMF3qAOBX94WPr/hBwRhkAlcPVYtIC/Yp+b7bGHOTY=,tag:iBm+6YCqsUpKCUrSA8n9KQ==,type:str]",
"provider": "ENC[AES256_GCM,data:PnSTnXPUrfWW722sJSt2ell4dyasyd5mp7oMOKLeqC9+tj/D71zROV60I4Z+rrWuatkxE/QB,iv:jU9zGGBrLbe5UXgrp/6l2KAi8j9+WXkgrrJU4V0lNhk=,tag:UOt3WLU9/C+YTswIujUAOA==,type:str]",
"instances": [
{
"schema_version": "ENC[AES256_GCM,data:nQ==,iv:JV7Lw4skmsESa4riEkVHvD/gezQI725IqYo5e+7B6E0=,tag:V7MKph1doRvuYVbARSg7mQ==,type:float]",
"attributes": {
"id": "ENC[AES256_GCM,data:isOxNiIpseE=,iv:iXjM5zVWEtEziXEbMpk0Iphw96Te19oavxwdB57ttgQ=,tag:4+pvQta9B+GHw/aa20q08w==,type:str]",
"metadata": [
{
"annotations": {},
"generate_name": "",
"generation": "ENC[AES256_GCM,data:Pw==,iv:JnFFVtZNRTH+cpOqDlc/89bjh/MzWe6Iq4WSr9e427o=,tag:YgKcUXNjOb5W3ckDmL98dg==,type:float]",
"labels": {
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:+Pwp,iv:ILQOVyxNcfK4GMgcYRK+R+xbKlFg51ljrQPvpqetAiw=,tag:RDOyGxPumswSmnqN05RrZw==,type:str]",
"tier": "ENC[AES256_GCM,data:N9QpE1k=,iv:BbtW7UXBtHKfqob4ISuCJl/KDymyw07mf9L5WkrU0VY=,tag:hULOFTZ4LDKi7oeOTWeS2Q==,type:str]"
},
"name": "ENC[AES256_GCM,data:Uds86JQh0r8=,iv:sqMgECjlJz/VjWLhnTeaON97KvoC8qavpwvo21Y8rl0=,tag:Dk0/vYBPAEo2+ldDx1qtnw==,type:str]",
"resource_version": "ENC[AES256_GCM,data:HAJ/PyOff33G,iv:eGbvlAsySHR6ZKDPSsn7jHGyGoSMvJbrzSLXT51zkpU=,tag:FxDc0UaUNzyeacznu8jQ5Q==,type:str]",
"uid": "ENC[AES256_GCM,data:n6DR45CaqdixIAXb9ZC9IIk2AJ6VGQp03lL1JnkYbcDwzStn,iv:hiYxs0TGN72UfYSVGFFnbQV9oZgmOgsOxSMwuCLLbSA=,tag:y870qVixOIwG85v3uisUcQ==,type:str]"
}
],
"timeouts": null,
"wait_for_default_service_account": "ENC[AES256_GCM,data:JylAlVY=,iv:cc+z8pEuibUWS+NAWtl5mACeZ1yFEVRuBLBg3SZ8cIQ=,tag:BWTXCDn6EHg1lDiQJ+NjSw==,type:bool]"
},
"sensitive_attributes": [],
"private": "ENC[AES256_GCM,data:EMJwEJ2kRIQyEzoWQ0W2VJ4SOt9MaHo75sDYfx0LQ/0JdhwkO/ac8/rCOII7DVvCXFIwUK3O17xg6Y2e9x3jcdzeBa2GYtddy+ncr+zPrPMTN9a9dJWZsA==,iv:LhIWFNeOyrAwdkAoQSqO5JH/qGcm5co1qVdZKQyjT+U=,tag:osuKcg9abPzSVDNyN1atFw==,type:str]"
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:18Z",
"enc": "vault:v1:iXY8+8M6TTu6efleve7uFnSE9X/tP5BfiVv0sMfW2NC2zjTUhHUA54s0lLx2ZOOvAPISwDGqnbrQO71B"
}
],
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2cFQ0N0hCOWxjd0ZIY052\nMkFUMWNQQkEwVUMvbEZmd1lUbGFNcTNEUG1jCmxPYWF4bzdwU1NDSDZza1BUWElh\nZWJydkhHb0VqTTdHSVpEZFp1cDY3RzQKLS0tIGpPY29IZFptdXNFTWR3Z1ZOOGY2\nRnJmbkVVQ0FYTnVFYnFIMVMwTStZUVUKyzdFCE4jD5yt/+XbHJx40OH17eUBiQQK\n96XacUTAC/8dK25auhpCydLwuUXTA3JEivzn8EXwo2P/UOij33fxGw==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Yyt6dzR2TE9FNjRjUWNa\nYjRjUk8vYVRtZmExeUFUcjVlckREenMwcFdJCk0welZIOTEwL01SNjVZeUxMMUEv\nZGEzS01Da3FJcm91YzcwTDRkUVNmcjgKLS0tIGtad1dyWUdQbGRnWU5jdC9vaG5a\nZzVOVW5NdU5zZ3dKS2FONlZBN1FQckEKL3D/rNxY9U5cKGKH+9pBvs8zbcl2VmBQ\nCllF9HJstZJ4wagfQiMuLzT7hiBRd/Qr5jRuTYn2NUULdPpTodvS3g==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2026-03-17T22:55:18Z",
"mac": "ENC[AES256_GCM,data:yQbwmwGkVbjnHZl6fF02AtaFJpGL/mw0YVGBkK7bkwCADQgpdtYM5FbsnQbDQDM1hY3Tq1YYc1S3NrUIv/QMQ66ZaabWGRpWqnMe8MtB4UG5YRy8WlDZJ3S4jAhJ7EI/DgMCxeU/glekjvWaumQeBGlAO2P2fdoDy5GfTRnCLwg=,iv:ek5AHtn92zpYKt3vhVtfV88jfLWPFCHoZV9YC76QSLU=,tag:8NEEAZW0lsYZBtI35a0/ZA==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue View git blame Copy permalink