feat(ops/secrets): grant nevsky builder secret access

Change-Id: I2343357b7c92c49a9bb22d1b8ce20091d6ab70ba
Reviewed-on: https://cl.tvl.fyi/c/depot/+/12987
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Autosubmit: tazjin <tazjin@tvl.su>

ops/secrets/nix-cache-priv.age

@@ -1,15 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw 0Pp+oYDW8qhXoui/ewFhOTP10+JNOMS5qw66SuVHsXg
+-> ssh-ed25519 dcsaLw jxVnXH/lNJb3lH4JkGApcJcPD7+X6L1z13ohh9LJXzE
-Usi+hC3pq8gzqp/taDJr2C+7fM1qxunhrngbyGrUMJ8
+rFIfLi+UGKcA5fG4nEnfmq7vViA35RaOcZTq1rOG30I
--> ssh-ed25519 zcCuhA xO33hAmuSPrpYeZXX1saM6mPYL5M6biLtBrsxc73+is
+-> ssh-ed25519 zcCuhA FU/Sr6BjcagWLy/2t+9EWuUtnmNmaMoyPcbuUrOdUTw
-S/pyKMUvn7zjjL3uIy3AJCkag4HpoOTh5SMYx/ZJ+rU
+mbNVkug7IWYuQu6nKgIti+B9NaVk/jnaJ24HR50Nbuw
--> ssh-ed25519 CpJBgQ D1PyFsBzoKLMocbcQpy4PE7lFQGweoI7MJDuAzDRUhM
+-> ssh-ed25519 1SxhRA oggSw/KBt4XK2AAZWhrf2gaCy2yprAjpidpb66Vzb0o
-9+7ofW8vB3ZdS4A9nU0Rq+c4AJQPTZ0Bo/R3z1FY3io
+7NvukFEo/7WwOTfkIinrnyweAh6G817yJhPYP5i8lIQ
--> ssh-ed25519 aXKGcg u7+l6RDdquEw0/e55x+Yx/W0+019qNsxJzR8DCkxwj0
+-> ssh-ed25519 ch/9tw 4jcEfZ5rDJb9zTj/Tq2KLWWHvaZOViPwMqRcLS9IUE0
-tseOgvoIQk5QG65IOqBg65n7ToFXTjHT+QhPT1/9PE0
+izFeDgb5zu6lwUXOtOKn3abUMDmkKXY4MgMO+3myzRQ
--> ssh-ed25519 OkGqLg Hsk569u9xxHWQZKNqqxpQbFaX4KDjS9VRqE808vh/kA
+-> ssh-ed25519 CpJBgQ Kg3WVgPjE3l6yRmMrZh3lWbaHVf+J+PWG8HUaGmO5Vc
-kiaoD3XCcrqfYEbneU+L7b2yPHo6ioUhtpxI9uEVnJw
+G84ko9Ip9nzSEVjpPotdxBLf7IeB1haYihDMQ9BYGno
--> a{7<M_-grease k~MV B{E[
+-> ssh-ed25519 aXKGcg KsjGwfFQywYtTv19cogd+JthBvGo3saoGLB8xqTp1HI
-sc3e
+QjiAypzrQwMLST1/raFOMl8V64wRT01uN5suw/jCrHw
---- dvGSRVY+ZDyS4cLqY8yguVZraB/IZSPaexlGMKLvnlQ
+-> ssh-ed25519 OkGqLg Qnkl+w1/6TsPGBp9GY54AhFOezGzkTIn5/w679Zcilg
-¦(wŽÚÓûΗ/Ó–÷W†$|Q¦†jäì°½z^Ž	]½
Ý£m‰$¦ª%¥.x‡K¯K¡á¨Þl[n°O75ªwiý¼>áÁõgÞ#ˆq4“^<5E>k;\ehX<68>"w¬”êÀÆäÇÀ` 9°Ó_ÇðCÈoòq<C3B2>ª¨›°›Ý·9mtåÀ<C3A5>K˜5¢
+7Q6Zr47E5YqRymSjASWA4LzxynbPU49tM2YDeu0Fdy0
+-> ssh-ed25519 xR+E/Q 8okVJ7nL35tujMgHPeoX3YZoOdoTgxcnGlEnJiIHnwQ
+MfWoPHhBKZAggdwecjqpU6sU6tl2k7rdoBd3iMcCu7k
+--- TSagyvcu/L1JT08E9NuJHPel2f4BjlrBqNtOyElDFjY
+†Zó¿½ÞÖ¨»•‡ÅšM†ÿ¦/ ÀCŠ<14>:}44›ž”f–ï~M4;%ËŠ‚©úùV¸B÷b9ŽD))-y¯ï’”rS© ÛŒMRy$Ù5žnî.bÿmTÈwó«§,ËÌÉ}wë39/pLüLÁ=ygD¨aW÷- §<>5'"wà¤"O‘

ops/secrets/nix-cache-pub.age

@@ -1,16 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw +jfxfM1YDu5CoYtFeRWtpkUQhmFWn/kNBYsBnie7BVg
+-> ssh-ed25519 dcsaLw ZBYqyCd+eJH8b6nuG3Off01ZRz+C8wBlXzXsHtKrPA8
-XxL9l87hXD0zCUEwbSR9OHSYgpOw89Km5iyxPPnVDGQ
+6xsUZDVJ+gsKW2XdEdRUlQv6enO3lSy7pfydhAhA2UM
--> ssh-ed25519 zcCuhA VAoDkN2gwErUFE/59V4IF9PbSBSleOjt2gosvYnHxWg
+-> ssh-ed25519 zcCuhA aYLfg5xvfDAL2fRCd/cKaNAf3nuMUKqkqtLQyPN6elE
-Pf6eh8EfAdATjZIkQfhhqOXuJXIdwIpybITcn+rcutI
+vfVIu+7QKOzrmZ08drUdBYTksaT+kHbj7kVxl5QPb9U
--> ssh-ed25519 CpJBgQ C6zIv78gu+wBeAjhmXANegSNqGHnugemXBPQcTimgxg
+-> ssh-ed25519 1SxhRA x9YVX3XS0BNy6uWPACM+Q6dNY2/Grn4gBAZt7ZCc5GQ
-80109g83Hk+smWuZkTIZJ6VFQqJ+LU1boWKQIH1AHjc
+m7KFpWpsM/5tNeFgPQb6VosYJv/IJES79H3E5epvvgE
--> ssh-ed25519 aXKGcg lPb+kGr0vuJkQO6VutAm4Yh1CVi/XfqNdGbAh/B7ZRk
+-> ssh-ed25519 ch/9tw MtZL+fIC9PeF4j4mJY+oF3KurgBtIrjP2Cnga6VV/Uk
-h4xb++7I9iv8208oqY0xLruA1r62mepISFcusczdbgs
+wGMsl48+SDfskXjtsMRheWvelDON6pMR288GAKhY2PU
--> ssh-ed25519 OkGqLg aOHt9OR8JChtYpclkgn9wCFnlayFje7WsMGQb8AqChU
+-> ssh-ed25519 CpJBgQ ICy5pQo+1pEXDvvvCHJahEnt8P0Ws/KSLg5eruNNS1Y
-3VRTDMUwFtDcoxGU/wiBzTvS0SB/xOpBG6s+ENvAXVE
+JBds2McxDga23lojtVlm3QFav9D/SnfO14RCkz/vy3o
--> Kow$7|\-grease
+-> ssh-ed25519 aXKGcg sO0sT+XRpZ05yn49HlPYHQi3/wrJ7dpy+S7L5HJjCVY
-8OGnQnY7gm4vMJRXjnBogA0HRU7hqIxs2sErFc7sV1CUNkZlFjdK8tZomlNwshjc
+ZDMWrcYhie2tzad5qPuAU1E978LVLTkQGb1rrjWsxeo
-p18HgtjJnaGhSqg1LyP7cJAo/XnSwDYCeNna/6vdlKBR3JeuOGTmx1NIG/cGSg
+-> ssh-ed25519 OkGqLg rl4dVxI+gUNyjdrQpRpAV/7HHrcY6sT8a/mxBWidmCM
---- w+jJplb/J3av+UcltcFf4qSqHoQ8Ol8lH/fFB3051Gw
+HCF9eR6GstX9FOHkTpTU8oulphwu+LCbsr1NyWktWPQ
-qIüíe:1*`j8õ±sºnHcyÎà7£²™Èõå(ªã¾.•˜xžD¸Ü_}‚%ó)P,DæÓ6«SÍéHÅêÃU9°ë”¬Ô0Ýí8ÍÔí\³ö—'
+-> ssh-ed25519 xR+E/Q lhTKIL2kGhR/de7kRShGCHMRsZVPlXfGxaMX3Q1Op1M
+fYiPRboq/bAsbtZQfbS1zlV7HjxeOKwFcafZSDETpdI
+--- /UN5QN0v3yyH0Vh9tv1u8GXnBX9j8nTkzezYVIXK+ds
+©ÔÀLÀÞÐtYS¿Ì°íÛ²²2ûEqnêH‘¬`Ÿ-­<>(Ï0}۱ʬ¯í&Ù¯CÅéíLþá‚#.yM¦yw¦„y¤9mF‹¾„å½QhÍL¯u

ops/secrets/secrets.nix

@@ -37,12 +37,13 @@ let
   sandunyDefault.publicKeys = admins ++ [ sanduny ];
   bugryDefault.publicKeys = admins ++ [ bugry ];
   nevskyDefault.publicKeys = admins ++ [ nevsky ];
+  cacheDefault.publicKeys = whitbyDefault.publicKeys ++ [ nevsky ];
 in
 {
-  "besadii.age" = whitbyDefault;
+  "besadii.age" = cacheDefault;
-  "buildkite-agent-token.age" = whitbyDefault;
+  "buildkite-agent-token.age" = cacheDefault;
-  "buildkite-graphql-token.age" = whitbyDefault;
+  "buildkite-graphql-token.age" = cacheDefault;
-  "buildkite-ssh-private-key.age" = whitbyDefault;
+  "buildkite-ssh-private-key.age" = cacheDefault;
   "clbot-ssh.age" = whitbyDefault;
   "clbot.age" = whitbyDefault;
   "depot-inbox-imap.age" = sandunyDefault;
@@ -53,8 +54,8 @@ in
   "irccat.age" = whitbyDefault;
   "journaldriver.age" = allDefault;
   "keycloak-db.age" = whitbyDefault;
-  "nix-cache-priv.age" = whitbyDefault;
+  "nix-cache-priv.age" = cacheDefault;
-  "nix-cache-pub.age" = whitbyDefault;
+  "nix-cache-pub.age" = cacheDefault;
   "owothia.age" = whitbyDefault;
   "panettone.age" = whitbyDefault;
   "smtprelay.age" = whitbyDefault;