sops_delete_secrets
Remove specified keys from a SOPS-encrypted file, cleaning both encrypted values and metadata. Prevents deletion of keys that other secrets depend on unless all dependents are also removed.
Instructions
Delete one or more keys from an existing SOPS-encrypted file. Removes both the encrypted value and the _meta_unencrypted entry. Rejects deletion of keys that other derived secrets depend on unless those dependents are also in the delete list. Requires SOPS_AGE_KEY env var.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| encrypted_content | Yes | Contents of an existing secrets.enc.yaml file | |
| key_names | Yes | Keys to delete |