Archived
sops matches creation rules against the input file path, so encrypting /tmp/<host>.keytab directly with stdout redirect fails to find the rule. Copy to secrets/ first, then use -i to encrypt in-place. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>