maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops/gerrit01): provide buildkite-api-proxy-token.age

Browse source 
This is a read-only Buildkite token, it was generated and installed by
flokli@ and has read_builds, read_build_logs, and read_pipelines
permissions.

Part of #118.

Change-Id: I0bbfbab9ad1152ff8e781b7380f44d3cd7245bab
Reviewed-on: https://cl.snix.dev/c/snix/+/30404
Autosubmit: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Reviewed-by: edef <edef@edef.eu>
This commit is contained in:
Florian Klink 2025-05-04 01:05:46 +03:00 • committed by clbot
parent 54c313c9b2
commit d85b322c55
3 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ops/machines/gerrit01/default.nix
View file

@ -54,6 +54,7 @@ in
secretFile = name: depot.ops.secrets."${name}.age"; secretFile = name: depot.ops.secrets."${name}.age";
in in
{ {
buildkite-api-proxy-token.file = secretFile "buildkite-api-proxy-token";
gerrit-oauth-secret.file = secretFile "gerrit-oauth-secret"; gerrit-oauth-secret.file = secretFile "gerrit-oauth-secret";
gerrit-replication-key.file = secretFile "gerrit-replication-key"; gerrit-replication-key.file = secretFile "gerrit-replication-key";
gerrit-sendemail-smtp-pass.file = secretFile "gerrit-sendemail-smtp-pass"; gerrit-sendemail-smtp-pass.file = secretFile "gerrit-sendemail-smtp-pass";

BIN
ops/secrets/buildkite-api-proxy-token.age Normal file
View file

Binary file not shown.

2
ops/secrets/secrets.nix
View file

@ -35,6 +35,8 @@ in
"restic-bucket-credentials.age" = allDefault; "restic-bucket-credentials.age" = allDefault;
"keycloak-db-password.age" = public01Default; "keycloak-db-password.age" = public01Default;
"buildkite-api-proxy-token.age" = gerrit01Default;
"gerrit-oauth-secret.age" = gerrit01Default; "gerrit-oauth-secret.age" = gerrit01Default;
"gerrit-replication-key.age" = gerrit01Default; "gerrit-replication-key.age" = gerrit01Default;
"gerrit-sendemail-smtp-pass.age" = gerrit01Default; "gerrit-sendemail-smtp-pass.age" = gerrit01Default;