tree dcee3cb196e52cf1b4ab8e43017b5641e146a732
parent fad4eba966e56c43da7c8c3f2e31591a2139fb57
author Thomas Draebing <thomas.draebing@sap.com> 1651751163 +0200
committer Thomas Dräbing <thomas.draebing@sap.com> 1652079580 +0000

Add option to use vault to manage key used for encryption

Using a local PGP-key for encryption of the secrets in the configuration
is not very secure and makes it hard to rotate and distribute the
key. Sops provides the option to use managed services for this
purpose, e.g. HashiCorp Vault.

This change adds the option to use HashiCorp Vault, when using the
provided python scripts to encrypt the config file.

Change-Id: I7683fbfdbed00506c3bca264ac8565f48bc5ea73