Reading and Writing Secrets
In order to be able to read or write files containing secret values you will need to add your GPG key to the monorepo and add it to the SOPS config file since all our committed secrets are stored in SOPS files.
Reading
SOPS files can be opened directly.
You can also fetch secret config values via e.g. neph config get -e <env>
SOME_KEY, this is just a convenience wrapper around opening
infra/inventory/<env>/config.yml with SOPS and looking for SOME_KEY
therein.
Writing
In order to write to SOPS files you will also need to import all GPG public keys. You can then edit them.