getsops / getsops/sops

Encrypt parte of file using different keys

Open
#1,196 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
23.1k
Forks
1.1k
Avg merge
1d 11h
Merged PRs (30d)
9

Description

Hi if possible use sops to encrypt for example in this way in the same file.sops.yml

Using aws KMS key 1

Key1: value1
Key2: value2

And with aws KMS key 2 in the same file

Key3: value3
Key3: value4

So when I open file with aws key 1

I can edit or see key1 and key2 with that key but key3 and key4 can't and show it with encrypted strings.

And if I open using aws key 2 i can see the key3 and key4 but the key1 and 2 show encrypted strings

The idea Is use the same file by 2 different people using their own key but can't see the secret from the other person

Is possible do that? I read the context but I guess is using different files in this case is the same.

If is possible how can I configure it sops?

Thanks

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the SOPS context documentation referenced in the issue and checking whether field-level encryption with separate AWS KMS keys is supported. Define what configuration or behavior would be needed for two users to view only their own fields, and document the supported result or limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.