wip: Add support for secrets

internal/config/cluster/cluster.go

@@ -16,6 +16,7 @@ type Cluster struct {
 	Git      string
 	Releases []string
 	Provider string
+	DotSops  string
 	// Internal
 	ReleasesObj release.Releases `yaml:"-"`
 }
@@ -55,8 +56,26 @@ func (c *Cluster) BootstrapRepo(gh githelper.Githelper, workdir string, dry bool
 			}
 		}
 
-	} else {
-		return err
+	}
+	if len(c.DotSops) > 0 {
+		dotsopsPath := fmt.Sprintf("%s/.sops.yaml", workdir)
+		if _, err := os.Stat(dotsopsPath); errors.Is(err, os.ErrNotExist) {
+			file, err := os.Create(dotsopsPath)
+			if err != nil {
+				return err
+			}
+			if _, err := file.WriteString(c.DotSops); err != nil {
+				return err
+			}
+			if err := gh.AddAllAndCommit(workdir, "Create a sops config file"); err != nil {
+				return err
+			}
+			if !dry {
+				if err := gh.Push(workdir); err != nil {
+					return err
+				}
+			}
+		}
 	}
 	return nil
 }