hoatle/.env-common.asc

## .env-common.asc
-----BEGIN PGP MESSAGE-----
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=YxB9
-----END PGP MESSAGE-----

## .env-common.example
GCP_PROJECT_ID=teracy-iorad
GCP_ZONE=us-central1-a
GCP_CLUSTER_NAME=dev
K8S_NAMESPACE=hoatle
REGISTRY_IMAGE=gcr.io/teracy-iorad/hieptranquoc/iorad-bot
GCP_KEY_FILE_BASE64=

## .env-develop-cd.asc
-----BEGIN PGP MESSAGE-----
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=M+Ys
-----END PGP MESSAGE-----

## .env-develop-cd.example
DEPLOY_K8S_ENABLED=true
HELM_DEBUG_ENABLED=true
HELM_TIMEOUT=2000s
# cert-manager-issuer
CERT_MANAGER_ISSUER_EMAIL=hieptq8888@gmail.com
# iorad-bot
HELM_IORAD_BOT_HOST=iorad-bot-develop.hieptq.iorad.dev
HELM_STORAGE_CLASS_NAME=
HELM_IORAD_BOT_BASE_URL=
HELM_IORAD_BASE_URL=
HELM_SLACK_APP_ID=
HELM_SLACK_CLIENT_ID=
HELM_SLACK_VERIFICATION_TOKEN=
HELM_APP_SECRET=
HELM_SLACK_CLIENT_SECRET=
HELM_SLACK_CLIENT_SIGNING_SECRET=

## .env-develop-ci.asc
-----BEGIN PGP MESSAGE-----

jA0ECQMCPPYz70fhaHrn0mQBrC81vpG8FGK+hn2sunKPz06RovLWTik90Cln65O0
WDfm919fEFtN3gYl1H5V52AvNyYpZa2ebcCFu/nilFgtct9ViDK/iyCuRro3DuED
+djBUpL4P/+0KYd2D/WqaGe5vu7A
=I1Mx
-----END PGP MESSAGE-----

## .env-develop-ci.example
DOCKER_PUSH_ENABLED=true
BUILD_ENABLED=true

## .env-type-config
develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-common.asc
develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-develop-ci.asc
develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-develop-cd.asc

## .gitignore
*
!.gitignore
!*.asc
!*.example

## README.md

      
    Raw
  

              README.md
            
          
    iorad-bot-gha-config

secret env configuration for iorad-bot
Init

Create a gist and pushing this template repo to your gist repo.


$ sh init.sh to create a random passphrase


Create .env-common, .env-develop-ci and .env-develop-cd files


Fill in the env values for these env files


Fill in the right values for the .env-type-config


Update


$ bash encrypt.sh <file> to encrypt files


$ git push the changes


References


https://github.com/teracyhq-incubator/secret-manager-action


## decrypt.sh
#!/usr/bin/env bash

FILE_TO_DECRYPT=$1

if [ "${FILE_TO_DECRYPT}" == ""]; then
  echo "FILE_TO_DECRYPT must be specified";
  exit 1;
fi

# TODO(hoatle): implement this

## encrypt.sh
#!/usr/bin/env bash

FILE_TO_ENCRYPT=$1

if [ "${FILE_TO_ENCRYPT}" == "" ]; then
  echo "FILE_TO_ENCRYPT must be specified";
  exit 1;
fi

if test -f "${FILE_TO_ENCRYPT}.asc"; then
  rm "${FILE_TO_ENCRYPT}.asc"
fi
cat .passphrase | gpg --symmetric --cipher-algo AES256 --batch --passphrase-fd 0 --armor ${FILE_TO_ENCRYPT}

## export.sh
#!/usr/bin/env bash

# see: https://gist.github.com/judy2k/7656bfe3b322d669ef75364a46327836
export $(egrep -v '^#' $1 | xargs)

## init.sh
#!/usr/bin/env bash

gpg --gen-random --armor 1 12 > .passphrase
	-----BEGIN PGP MESSAGE-----

	jA0ECQMCxbBOIuyqJKXn0usBvi94efG6BfVbKgvlVHRalZLhw74Ys9H3t0rDTXm0
	ACcTiG/NUh5w9fEd/bT7gRjTHMxb2c2e/Q/YqU7m1R0jALTL8IQiAllMsRWN3T72
	niiOiLyfV33RIZWQhRM8yDOwBm+GhRiLWseXmT4FsOR4uJjuTwzKs9YbTu+N02a5
	lYYtryDvlolfVMwqa0sMTe+zoV/Xc0qZPebk0EFisJ8274HUceDQeH3V8wL8gnxd
	YJgzMQM+FRo9DxZqUCx00Jhf8wnmDdVSvC34mv5szVczMYO+ZOMuZnHL9BCB0cKx
	coC9jcX7Ibsni/vBTgly6Tsc9mSOrq2h8Nxpd52U5+hGUns8WN1poscOvh+M7kE/
	JheyhBAa7jQ+VYOq/1pKy1+onHzzc+IZdiH2JaLbl6ImYZRDe8EI672dzdLfi2qe
	PEuLUE5m3kuAjdeYr9lF+2Zo6U3bKlz1NE25aWuC25N7Kn8dIQLPmCKVi1qAVbgK
	0V34QVVaNh1PeyQzVcvqDPOGt3VUK+0emj2q+GvBeAn6T+5xNwjVRIz4rCbxAyKE
	lcMprzhS8WKdghHKh3xIt38wKltS3wbFgnLDbjKPStYZhMsHBig1ygUHj8QoWYtL
	ImEToRUrk5fmkufd1eW6OhssvgNPIMIEsGv7i6NXdvc7KEtxk5KtUeerEKaaiaD4
	3rWiIJM1q5aLyPzaiasG8wNbidfzuwSmdbHsLHGJEf+v3FuxJ5n4OkFo6WcjP/2u
	a6Pj5mDKJiqi3oXxqcm+pEJjJlp73YkDBM4ibPNwG8In68BOyBqhW9DJa6DbtAZJ
	ZVRbvBPo4TBJFILBUYdQbWiHgTAlmRPa+TDC7S12eW3nVwc2inqb++Ant5XwoO4J
	DIG7eGuXDLnElppGe27obo/EqnRBntBUh7N61Ina8DyAT+BRE3Ubr2FMJQjbWp3J
	y4Rnpo0ODMu/9arom/B/11akGT4znpqSJTqkOC/7/vWgJVa7uaJcIthXwnE23Vyl
	+Xw9L2fJlrhW5Vy3NS6s3/jA06Ht30pG61ri7yAvbbuz6ZzxsuLJPgIoPzR1lpCD
	GnqGxAcLl99RNj6UTV8coTbWk6L+NR1qFHxATFa0NoMQ29LKKprHBpA4Dvib9CI3
	zTxKANbUQyk3FKwOnXNuEioqgMHNaUtdPOOXg5EpLGJqSEyjKgOr2GuaAGIRhslb
	U9y/OQceBZvLKes5vM7bZl4oErR7C5cYzlyp+BZ9PDfRSNExJxW5wb+l01ZoT8Ut
	vAmY5fUJgZ5zki6sScSF2LkDKx1jwFLj/xkVXLj7KstfrziTbH2yDfhqhEHUeL4t
	iMr+DJV9vF8UcbeG69CxcUO1neSRSGcZ4f9qOuC4gtG/9IsIVfpcjTM6Fz/o7gwN
	6ALojCZXEgbUiJAxvO8SHC/o3koo3E1VsXBjL96lmmqisyMJlmgFp48H+nFQDf95
	yhiVIxURIwNSbad2X0AoUd1i1Z3FBaAeRA6Q5Ce7GhAD8E0F109AlDJWwhpZAAFp
	AdP92vcdXAuWyIQuCw6DP84YKVmJutHhuscXNjO/8mTqoOg8y4dHsZ8+7lygsAlj
	XmOWawQTdQYbjjP5E/ExyZKRL2RNzWtL59HRSGQJmByWTjfEGKSHbTy+Mx843gue
	Lb7dczLI0jTLmFkttmqCBsUx1Q1yo1p+Hq+M72MJs/puosgUPC0iEPB5yAwpAVVm
	XOp89t+n/tHgHOAcCqH0FTJbJGKaChoHcLkARDwW2fhuJXDofODluBzTx+lN+4S8
	4DlJCfYAnNZXqQwubz/vBt0jttUH3+v5ZxlrpSjytSNfhEBijWEry4NSHGHBW59g
	IRHBHIO0texJJGLXH5Q1PKaH67K2Yk4BqSYuPUBXgb30Eev3TccERfkJI7WvglWP
	kcUX+tsNAfHhatvnWUpkfx3hQ1PRIuPlxMHIjsqEKiGlN2sSkZSHhZKhzafvgDme
	NLSFJJg6/00Q2bt1y75S6kPUb0f3HZVuqPHcSFlG6XWjSD2z7HyVGng4ImbEzSXT
	qHikmhaIxRjH+DgtErHNNhWcolKU5eBoDkWwJsakL/w2b95sGeJGo9fmpds0hZ51
	sX9EzgC1EF8FeEjr41jhgv8diN98OyuVOZRatE7rL5Bx3A111AUvMJGZefSxMrOP
	AO5SRC7RL1vSxS1/ACMYebkNZofPuMjPlRPypfmUL6elbX0INDphUcVvfsz3FIW3
	BV9sQmAqObtz6oQNc0JwNKbrvZiRZtAs4vF4GqcyyeXnNxS6IFuaHM2/dbvDil8D
	FeXbWwCESxNuKhGlLqj2aRm0EU1nO5ohwf5BtY2S0Z/gaSiJFCQRUBR/my+QpRGs
	YrnRCL3ZI1OgIjlVRyKuxhefh+wO1/wPHMOFW9IrNq2SwGaRVsasGp4groibL2+Y
	jFJiPxQtYHel3LHCG1rcLGX87vXJjty3pnRA20DBt9qewq/vhoEni4Yzb+oi/2Em
	u8KWvy0L7LN8RbW5gre8GZcfh6VKQSm9fyuB0w8tUFOm4fmkco3r9TzYDTGa09FP
	3TbIi+P7hRTnvrMUTFsjMyb5RO+ddX/E85B18MvHBse0tk+8AamignPird3H7CVC
	o17l4IdIuPgX5Ex4Z9w8XoSRcRHcwWtwI4zyS3V69Lf2ir+QsfBBX/k8nPr49SCG
	7rznU7nRCXSQ7En4XsaLel9qrr7tMxOB8FH00yBF9JT3U5zW/KBKVcvenZR2852d
	YcA2Amc2KsJabGN3WpaIOaCM+511BnO71W/Syaek9IlhszQfX1XnffwbYU8me3Pu
	9LYgjlZo/jhflsiNa8PajAgEKs6VL2wY8oY+6Cmyq5ijf+HivL/vECSEHr4OiviG
	R0VPCZyASVLdyolElUXDvD8gmcGxdzfQw3xEWSNuOS3Gtwd+4ZKOuIVshKE7L4N2
	v6u4TaGgU2L5Of5leuTB3axGZCeFRHYgyLnXH38oHe9ArHgrfyN6apXOCSEYZ0N8
	SxFfBTHp58WNytJeiQRkqE0WEzKAgq/wbvMS0yh00xXEAPL4T+CxjSORy16sL/Ck
	Fj5ss0itbHvZ
	=YxB9
	-----END PGP MESSAGE-----
	GCP_PROJECT_ID=teracy-iorad
	GCP_ZONE=us-central1-a
	GCP_CLUSTER_NAME=dev
	K8S_NAMESPACE=hoatle
	REGISTRY_IMAGE=gcr.io/teracy-iorad/hieptranquoc/iorad-bot
	GCP_KEY_FILE_BASE64=
	-----BEGIN PGP MESSAGE-----

	jA0ECQMCCNFSXSSohfLn0sDxAb2zl16nXDlE7/hEfCTxvCM2BKhccgjm16SB6vfg
	mc+aKTtTFU6afRVf3J30RUhR7j2v4cI9NU8i0GxWkMNA5njl7WRtN+ecT81wx7Pt
	nzxiI6tjAUfTwvNEx+ttusrW7ZWdICkp/13x4FJj2tNffPrVExLM7YM+WVzKjt4k
	9tCBJ2nUU1hSlBkDgGMkn0erHjpJS6mvUBmgJ6PgRHZiZ2a0jQMPcSvWZQENYjCs
	GCM36frhl2aFTC84JpgIPjxzlJimCogihyEl57an0hLd+oGHHSDFdsuxuMDOEfLz
	lg9SzWFOKZ9YuY9Hbhx9af1yQMFPDr/klzXwSJcY9wbbq4l/RSUt3d7PNh0/jfc2
	npD2DLhanZXZdS1iNEfcITg8L4+Uw6NX9dFkOXQz50pevHW2R1z9wzmLYEhqH4zp
	7gU1U2zA8s0vjy3AGUZTQ8OQOZ0/AVygr+y1VsDmIr+NmIbJmKclMym8144OksUs
	GFkX+PEHkEj9K9UZbzan3Sau/H+qCjWSsF6EUdUZi2eLknj5l9L+00yyQVUmftkt
	e5R0IQ7qHTy9ZficyzPQrs9W4g==
	=M+Ys
	-----END PGP MESSAGE-----
	DEPLOY_K8S_ENABLED=true
	HELM_DEBUG_ENABLED=true
	HELM_TIMEOUT=2000s
	# cert-manager-issuer
	CERT_MANAGER_ISSUER_EMAIL=hieptq8888@gmail.com
	# iorad-bot
	HELM_IORAD_BOT_HOST=iorad-bot-develop.hieptq.iorad.dev
	HELM_STORAGE_CLASS_NAME=
	HELM_IORAD_BOT_BASE_URL=
	HELM_IORAD_BASE_URL=
	HELM_SLACK_APP_ID=
	HELM_SLACK_CLIENT_ID=
	HELM_SLACK_VERIFICATION_TOKEN=
	HELM_APP_SECRET=
	HELM_SLACK_CLIENT_SECRET=
	HELM_SLACK_CLIENT_SIGNING_SECRET=
	-----BEGIN PGP MESSAGE-----

	jA0ECQMCPPYz70fhaHrn0mQBrC81vpG8FGK+hn2sunKPz06RovLWTik90Cln65O0
	WDfm919fEFtN3gYl1H5V52AvNyYpZa2ebcCFu/nilFgtct9ViDK/iyCuRro3DuED
	+djBUpL4P/+0KYd2D/WqaGe5vu7A
	=I1Mx
	-----END PGP MESSAGE-----
	develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-common.asc
	develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-develop-ci.asc
	develop=gist://725c3d9e3672c3ffbcdc6afa65ee9ca0#.env-develop-cd.asc
	#!/usr/bin/env bash

	FILE_TO_DECRYPT=$1

	if [ "${FILE_TO_DECRYPT}" == ""]; then
	echo "FILE_TO_DECRYPT must be specified";
	exit 1;
	fi

	# TODO(hoatle): implement this
	#!/usr/bin/env bash

	FILE_TO_ENCRYPT=$1

	if [ "${FILE_TO_ENCRYPT}" == "" ]; then
	echo "FILE_TO_ENCRYPT must be specified";
	exit 1;
	fi

	if test -f "${FILE_TO_ENCRYPT}.asc"; then
	rm "${FILE_TO_ENCRYPT}.asc"
	fi
	cat .passphrase \| gpg --symmetric --cipher-algo AES256 --batch --passphrase-fd 0 --armor ${FILE_TO_ENCRYPT}
	#!/usr/bin/env bash

	# see: https://gist.github.com/judy2k/7656bfe3b322d669ef75364a46327836
	export $(egrep -v '^#' $1 \| xargs)
	#!/usr/bin/env bash

	gpg --gen-random --armor 1 12 > .passphrase