Credentials Distribution - Using SOPS?

[rpoisel]

Hi there,

I'm considering using fetchit to implement a "poor man's GitOps" approach for managing deployments based on podman-kube on one of my personal VPS instances.

To manage credentials and other sensitive data, I'm thinking about extending fetchit with support for CNCF's SOPS to allow decrypting secrets embedded in Kubernetes-style YAML manifests during the fetch/apply process.

Questions:

• Do you think this makes sense within the scope of fetchit?
• Are you aware of any other recommended approaches for handling secrets in a lightweight GitOps-style setup using fetchit?

Thanks for your thoughts and guidance!