关于 SOPS
SOPS 为 YAML 和 JSON 等结构化配置文件提供无缝加密。它与云密钥管理服务和 age/PGP 集成,在保持静态密钥的同时在编辑器中保持人类可读性。
主要功能
- 01按键或值有选择地加密 YAML 和 JSON 文件
- 02与 AWS KMS、GCP Cloud KMS、Azure Key Vault 或 age 集成
- 03在明文中查看和编辑加密文件,更改时重新加密
- 04通过云提供商 IAM 管理加密密钥
适用场景
- 01在基础设施代码旁存储加密凭证
- 02安全地在版本控制中维护秘密配置文件
- 03自动化 CI/CD 管道中的加密/解密
- 04通过集中密钥管理在团队间共享加密密钥
安装
选择你的系统或包管理器,复制命令到终端运行。
$
安装完成后运行sops --version确认安装成功。
命令示例
常用命令按使用顺序排列。
01
02
README 原文English
来自项目 READMEREADME 暂无中文译文,以下为英文原文;中文介绍见上方。
SOPS: Secrets OPerationS
========================
**SOPS** is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY
formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP.
(`demo <https://www.youtube.com/watch?v=YTEVyLXFiq0>`_)
.. image:: https://i.imgur.com/X0TM5NI.gif
------------
.. image:: https://pkg.go.dev/badge/github.com/getsops/sops/v3.svg
:target: https://pkg.go.dev/github.com/getsops/sops/v3
Documentation
-------------
You can find the SOPS documentation on `getsops.io <https://getsops.io/>`_ under `"Docs" <https://getsops.io/docs/>`_.
Security
--------
Please report any security issues privately using `GitHub's advisory form <https://github.com/getsops/sops/security/advisories>`_.
License
-------
Mozilla Public License Version 2.0
Authors
-------
SOPS was initially launched as a project at Mozilla in 2015 and has been
graciously donated to the CNCF as a Sandbox project in 2023, now under the
stewardship of a `new group of maintainers <https://github.com/getsops/community/blob/main/MAINTAINERS.md>`_.
The original authors of the project were:
* Adrian Utrilla @autrilla
* Julien Vehent @jvehent
Furthermore, the project has been carried for a long time by AJ Bahnken @ajvb,
and had not been possible without the contributions of numerous `contributors <https://github.com/getsops/sops/graphs/contributors>`_.
Credits
-------
SOPS was inspired by `hiera-eyaml <https://github.com/TomPoulton/hiera-eyaml>`_,
`credstash <https://github.com/LuminalOSS/credstash>`_,
`sneaker <https://github.com/codahale/sneaker>`_,
`password store <http://www.passwordstore.org/>`_ and too many years managing
PGP encrypted files by hand...
-----
.. image:: docs/images/cncf-color-bg.svg
:width: 400
:alt: CNCF Sandbox Project
**We are a** `Cloud Native Computing Foundation <https://cncf.io>`_ **sandbox project.**评论
支持 Markdown