diff --git a/.sops.yaml b/.sops.yaml
index d82637e..92cdb26 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,5 +1,7 @@
 creation_rules:
 - encrypted_regex: "^(data|stringData)$"
+  # BD1A: new gpg key
+  # 6878: in cluster key
   pgp: >-
-    2CC2B3631D5C3393901335DB68F95C5D753EE1E5,
+    BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD,
     687802D4DFD8AA82EA55666CF7DADAC782D7663D