Encrypt secret

sops --encrypt --output=manifests/mysql-envs.secret.enc.yaml manifests/mysql-envs.secret.dec.yaml

View secret

sops --decrypt manifests/mysql-envs.secret.enc.yaml

Apply secret

sops --decrypt manifests/mysql-envs.secret.enc.yaml | kubectl apply --filename=-

Edit secret

EDITOR="code --wait" sops manifests/mysql-envs.secret.enc.yaml

Decrypt secret

sops --decrypt --output=manifests/mysql-envs.secret.dec.yaml manifests/mysql-envs.secret.enc.yaml