shortcut to update the KMS keys and rotate all files - Githubissues

Ibotta / sopstool

SOPS multi-file wrapper

Apache License 2.0

38 stars 4 forks source link

shortcut to update the KMS keys and rotate all files #23

Closed blimmer closed 2 years ago

blimmer commented 6 years ago

Current Behavior

When you run sopstool rotate it doesn't re-encrypt all the files against the new key.

Expected Behavior

I expected to be able to:

change the kms key in .sops.yaml
run sopstool rotate
all files re-encrypted against the new key

However, I needed to find/replace all occurrences of the kms key arn and then run sopstool rotate.

Steps to reproduce

See above. Linux, Sopstool v0.2.0