Ibotta/sopstool

shortcut to update the KMS keys and rotate all files

blimmer opened this issue · 0 comments

blimmer commented

Current Behavior

When you run sopstool rotate it doesn't re-encrypt all the files against the new key.

Expected Behavior

I expected to be able to:

  • change the kms key in .sops.yaml
  • run sopstool rotate
  • all files re-encrypted against the new key

However, I needed to find/replace all occurrences of the kms key arn and then run sopstool rotate.

Steps to reproduce

See above. Linux, Sopstool v0.2.0