How do I add multiple age keys to a path_regex in .sops.yaml?

[Yongbeom-Kim]

Hi guys, I am currently trying to add multiple age public keys to a single path_regex in a .sops.yaml file.

I've tried doing the rotate and updatekeys command, but I just don't understand how I can target a path regex expression with these commands.

I've also tried updating the .sops.yaml file manually with the block scalar construct:

creation_rules:
  - path_regex: .*\.env$
    age: >-
      age1a5c726yqajxf635dtvkt5pfydfg9mjf72dn458u53arjx3g5tphsxa3u3w
      age1wwaz575rrr6stntm75ckhr00eqjc9nlg6p63trfyz97gf6h8fs3sh5le8h

But then when I try to create a new file:

sops test.env

It gives this error:

failed to parse input as Bech32-encoded age public key: malformed recipient "age1a5c726yqajxf635dtvkt5pfydfg9mjf72dn458u53arjx3g5tphsxa3u3w age1wwaz575rrr6stntm75ckhr00eqjc9nlg6p63trfyz97gf6h8fs3sh5le8h": invalid character human-readable part: s[62]=32

I'm at my wits end - how do I add multiple age keys so that anyone with at least 1 of the private key can encrypt/decrypt the file? Is there something I'm missing?

[felixfontein]

I think you need to separate the keys by comma, not by space:

creation_rules:
  - path_regex: .*\.env$
    age: >-
      age1a5c726yqajxf635dtvkt5pfydfg9mjf72dn458u53arjx3g5tphsxa3u3w,age1wwaz575rrr6stntm75ckhr00eqjc9nlg6p63trfyz97gf6h8fs3sh5le8h

[Yongbeom-Kim]

Oh, thank you - works well.