Securing DevOps Show & Tell: Mozilla Sops

This episode is an introduction to Mozilla Sops (https://github.com/mozilla/sops), the secrets management tools used by the Firefox Operations teams to handle infrastructure credentials.

Sops was created in 2015 and has grown into a widely used tool both inside and outside Mozilla. We walk through initial setup using PGP, discuss the internal structure of Sops encrypted files and why they play well with git, then explain how to use AWS KMS and GCP KMS, then show how to automate creation rules in a config file.

- 01:47 A bit of history
- 03:33 Using Sops with PGP
- 04:57 Internal structure of Sops encrypted files
- 07:05 Meaningful git diff
- 10:03 The bootstrapping of trust
- 12:54 Usage with AWS KMS
- 16:40 Usage with GCP KMS
- 19:34 Automating creation rules with .sops.yaml
- 25:17 Some closing thoughts

Видео Securing DevOps Show & Tell: Mozilla Sops канала Securing DevOps