Encrypt parte of file using different keys
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 23.1k
- Forks
- 1.1k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 9
Description
Hi if possible use sops to encrypt for example in this way in the same file.sops.yml
Using aws KMS key 1
Key1: value1
Key2: value2
And with aws KMS key 2 in the same file
Key3: value3
Key3: value4
So when I open file with aws key 1
I can edit or see key1 and key2 with that key but key3 and key4 can't and show it with encrypted strings.
And if I open using aws key 2 i can see the key3 and key4 but the key1 and 2 show encrypted strings
The idea Is use the same file by 2 different people using their own key but can't see the secret from the other person
Is possible do that? I read the context but I guess is using different files in this case is the same.
If is possible how can I configure it sops?
Thanks
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the SOPS context documentation referenced in the issue and checking whether field-level encryption with separate AWS KMS keys is supported. Define what configuration or behavior would be needed for two users to view only their own fields, and document the supported result or limitation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100