keys:
  - &ag 6A822E8F83DE72E1FDE37E2F128DD00F08D44F43

creation_rules:
  - path_regex: \.sops\.[a-z]+$
    encrypted_regex: "^(data|stringData)$"
    key_groups:
    - pgp:
      - *ag