.sops.yaml

---
creation_rules:
  # By default allow following keys to encrypt/decrypt secrets
  # Specific path can be configured as explained here
  # https://github.com/mozilla/sops#using-sops-yaml-conf-to-select-kms-pgp-for-new-files
  # !  The first regex that matches is selected
  - path_regex: cert/pki/private/ca.key.enc
    key_groups:
      - pgp:
        - '56D8342434B84E2D1CCF53D96E9A025D52210D3D'  # Olblak
        - '6699E555C6730CAED9083B7AD40F4AD2F55AF15F'  # timja
        - 'E104B7543ECCCC68EA1EB35DD9B2DBFB59AD8344'  # Markewaite
        - '29B84443F41DE582F71599AFB47082DEE225AE06'  # Damien Duportal
        - '81B0C54A1BA2C92EAD985025A2B9560AF24FF1AD'  # hlemeur
        - '6CD774F428CA355770C67851496D2EDEDEFA7D47'  # smerle
        - '88FABF5F307FB5870B6AD2E8A266F2D3F9D60C45'  # Halkeye