maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops/secrets): grant nevsky builder secret access

Browse source 
Change-Id: I2343357b7c92c49a9bb22d1b8ce20091d6ab70ba
Reviewed-on: https://cl.tvl.fyi/c/depot/+/12987
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Autosubmit: tazjin <tazjin@tvl.su>
This commit is contained in:
Vincent Ambo 2025-01-12 20:02:29 +03:00 • committed by clbot
parent ec06690c42
commit 6733b26ba5
7 changed files with 43 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

13
ops/secrets/secrets.nix
View file

@ -37,12 +37,13 @@ let
sandunyDefault.publicKeys = admins ++ [ sanduny ];
bugryDefault.publicKeys = admins ++ [ bugry ];
nevskyDefault.publicKeys = admins ++ [ nevsky ];
cacheDefault.publicKeys = whitbyDefault.publicKeys ++ [ nevsky ];
in
{
"besadii.age" = whitbyDefault;
"buildkite-agent-token.age" = whitbyDefault;
"buildkite-graphql-token.age" = whitbyDefault;
"buildkite-ssh-private-key.age" = whitbyDefault;
"besadii.age" = cacheDefault;
"buildkite-agent-token.age" = cacheDefault;
"buildkite-graphql-token.age" = cacheDefault;
"buildkite-ssh-private-key.age" = cacheDefault;
"clbot-ssh.age" = whitbyDefault;
"clbot.age" = whitbyDefault;
"depot-inbox-imap.age" = sandunyDefault;
@ -53,8 +54,8 @@ in
"irccat.age" = whitbyDefault;
"journaldriver.age" = allDefault;
"keycloak-db.age" = whitbyDefault;
"nix-cache-priv.age" = whitbyDefault;
"nix-cache-pub.age" = whitbyDefault;
"nix-cache-priv.age" = cacheDefault;
"nix-cache-pub.age" = cacheDefault;
"owothia.age" = whitbyDefault;
"panettone.age" = whitbyDefault;
"smtprelay.age" = whitbyDefault;