creation_rules:
  - path_regex: (secret|secrets)\.(yml|yaml)$
    unencrypted_regex: ^(apiVersion|kind|name|namespace|type)$
    kms: 'arn:aws:kms:us-east-1:140023401248:key/c51c2cc5-4e8e-484d-b2f0-4d4ec2039938'
    # kms: 
    #   - arn: 'arn:aws:kms:us-east-1:140023401248:key/c51c2cc5-4e8e-484d-b2f0-4d4ec2039938'
    #     aws_profile: home
    age: 'age1k5y5gj5fzpwtjgzqd4n93h4h9ek9jz8898rva5zsgj7zjet97ytq4dtzjs'
    hc_vault_transit_uri: 'https://vault.balsillie.net:443/v1/sops/keys/krds'