Investigate Source control file encryption for Generation Pipeline

[NathanielRose]

As an: Operator I want: Guidance on source control file encryption So that: My gitops repository for live infrastructure deployment has redacted secrets and encrypted configuration files

Describe the solution you'd like: A section within the generation pipeline that details guidance on source control file encryption and integration with SPK.

Acceptance Criteria:

• [ ] Tool Assessment: Gitcrypt vs Blackbox vs Gitsecret
• [ ] Documentation on guidance

Does this require updates to documentation?: Yes

[andrebriggs]

@NathanielRose @yradsmikham this seems low pri relative this the other items in the "epic"

Encryption of files vs Keyvault secrets (Is this still needed?) Tool Assessment: Gitcrypt vs Blackbox vs Gitsecret Documentation on guidance

There are many approaches to this. I'm not sure if we need to be prescriptive about this right now.

[yradsmikham]

@andrebriggs Yes, this is indeed low-priority.

[NathanielRose]

@andrebriggs Thoughts here on adding documentation for this?

[andrebriggs]

@NathanielRose Since GitCrypt, Blackbox and GitSecret are will known tool do we really need to do an analysis?

Tool Assessment: Gitcrypt vs Blackbox vs Gitsecret Documentation on guidance

What would suffice would just be mentioning these tools. See link1, link2, and link3

If we do that what do you think the size of the task is?

cc @yradsmikham