2bdb497c85
This merges the two directories together, and explains the two different AWS profiles and what they're used for. Change-Id: Ieaa09be5af02491056f5ad83b1d639e2de9a218b Reviewed-on: https://cl.snix.dev/c/snix/+/30102 Autosubmit: Florian Klink <flokli@flokli.de> Reviewed-by: Ryan Lahfa <masterancpp@gmail.com> Tested-by: besadii
62 lines
1.8 KiB
Nix
62 lines
1.8 KiB
Nix
{ depot
|
|
, pkgs
|
|
, ...
|
|
}:
|
|
|
|
let
|
|
clickhouseConfigAWS = builtins.toFile "clickhouse-local.xml" ''
|
|
<clickhouse>
|
|
<s3>
|
|
<use_environment_credentials>true</use_environment_credentials>
|
|
</s3>
|
|
</clickhouse>
|
|
'';
|
|
# clickhouse has a very odd AWS config concept.
|
|
# Configure it to be a bit more sane.
|
|
clickhouseLocalFixedAWS = pkgs.runCommand "clickhouse-local-fixed"
|
|
{
|
|
nativeBuildInputs = [ pkgs.makeWrapper ];
|
|
} ''
|
|
mkdir -p $out/bin
|
|
makeWrapper ${pkgs.clickhouse}/bin/clickhouse-local $out/bin/clickhouse-local \
|
|
--append-flags "-C ${clickhouseConfigAWS}"
|
|
'';
|
|
|
|
in
|
|
depot.nix.readTree.drvTargets {
|
|
inherit clickhouseLocalFixedAWS;
|
|
|
|
parse-bucket-logs = pkgs.runCommand "archivist-parse-bucket-logs"
|
|
{
|
|
nativeBuildInputs = [ pkgs.makeWrapper ];
|
|
} ''
|
|
mkdir -p $out/bin
|
|
makeWrapper ${(pkgs.writers.writeRust "parse-bucket-logs-unwrapped" {} ./parse_bucket_logs.rs)} $out/bin/archivist-parse-bucket-logs \
|
|
--prefix PATH : ${pkgs.lib.makeBinPath [ clickhouseLocalFixedAWS ]}
|
|
'';
|
|
|
|
|
|
# A shell, by default pointing us to the archivist SSO profile / account by default.
|
|
shell = pkgs.mkShell {
|
|
name = "archivist-shell";
|
|
packages = with pkgs; [ awscli2 ];
|
|
|
|
AWS_PROFILE = "archivist";
|
|
AWS_CONFIG_FILE = pkgs.writeText "aws-config" ''
|
|
[sso-session nixos]
|
|
sso_region = eu-north-1
|
|
sso_start_url = https://nixos.awsapps.com/start
|
|
sso_registration_scopes = sso:account:access
|
|
|
|
[profile "archeologist"]
|
|
sso_session = nixos
|
|
sso_account_id = 080433136561 # nixos root
|
|
sso_role_name = archeologist
|
|
|
|
[profile "archivist"]
|
|
sso_session = nixos
|
|
sso_account_id = 286553126452 # archivist
|
|
sso_role_name = AWSAdministratorAccess
|
|
'';
|
|
};
|
|
}
|