While credstash is great, not everyone needs / wants that overhead to just encrypt a single secret or two.
[x] Use kms:: magic string indicator
[x] encryption cli functionality sls secrets encrypt [string] returns encypted string to plug in to vars
Probably no need for envelop encryption to keep it simple, kms supports up to 4k. There is a use case for wanting to encrypt large chunks of files though (private keys for instance). Perhaps offer kms-file:: as another functionality.
shortjared
commented
8 years ago
While credstash is great, not everyone needs / wants that overhead to just encrypt a single secret or two.
kms::magic string indicatorsls secrets encrypt [string]returns encypted string to plug in to varsProbably no need for envelop encryption to keep it simple, kms supports up to 4k. There is a use case for wanting to encrypt large chunks of files though (private keys for instance). Perhaps offer
kms-file::as another functionality.