Current Behavior
When you run sopstool rotate it doesn't re-encrypt all the files against the new key.
Expected Behavior
I expected to be able to:
- change the
kms key in .sops.yaml
- run
sopstool rotate
- all files re-encrypted against the new key
However, I needed to find/replace all occurrences of the kms key arn and then run sopstool rotate.
Steps to reproduce
See above. Linux, Sopstool v0.2.0