Daniel Cosme
31 lines
594 B
Bash
Executable File
31 lines
594 B
Bash
Executable File
#!/bin/sh
|
|
|
|
set -eu
|
|
|
|
if [ -z "${AGE_KEY_NO_PQ}" ]; then
|
|
echo "unbound variable"
|
|
fi
|
|
if [ ! -f "${AGE_KEY_NO_PQ}" ]; then
|
|
echo "Error: ${AGE_KEY_NO_PQ} file does not exist"
|
|
exit 1
|
|
fi
|
|
|
|
PUBLIC_KEY=$(age-keygen -y $AGE_KEY_NO_PQ)
|
|
|
|
SECRETS_ENC_PATH=$HYDRA_SECRETS_PATH
|
|
mkdir -p $SECRETS_ENC_PATH
|
|
for FILE in $SECRETS_FOLDER/*; do
|
|
FILENAME="${FILE##*/}"
|
|
DEST=$SECRETS_ENC_PATH/$FILENAME
|
|
|
|
if [ "$FILENAME" = "kustomization.yaml" ]; then
|
|
mv $FILE $DEST
|
|
echo "Moving UNENCRYPTED $FILE"
|
|
continue
|
|
fi
|
|
|
|
sops --encrypt --in-place $FILE
|
|
echo Moving encrypted file to $DEST
|
|
mv $FILE $DEST
|
|
done
|