getsops/sops

When we encrypt our values it updates all variables

nodkrot opened this issue · 2 comments

nodkrot commented

This is problematic because its hard to see what was changed in git and it is very easy to make a mistake: For example if i forgot to decrypt latest values, i change something and then encrypt it will override all values with outdated information.

Is there a setting im missing?

alainrk commented

Hi @nodkrot could you provide an example to replicate the issue?

  • 👍1
nodkrot commented

We ended up using sops --set which helps with diffing only changed variables. We have encrypted and decrypted files separate to avoid accidental commits with decrypted values for context.

Issue can be closed

  • 👍1