None of the keys shown here are actually used for anything other than this example.

Keeping Infrastructure as Code (IaC) files usually means also storing secrets to be used in these files. These secrets can’t just be stored in a git repo unencrypted like regular IaC files, that would be silly. So, how can we do it?

With SOPS and Age.

After using these two tools for the last couple of months, I have become quite comfortable with using them to script deployments requiring tokens, api keys, and other sercets.