yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

clan-cli: secrets machines remove: update secrets after removing the key

Browse Source 
Quick follow up to PR #2781, this commit does the same kind of logic but
for machines instead of users and groups.

Note that this only affects the `clan secrets machines remove`
sub-command, and that `clan machines delete` still leaves unusable
secrets & vars behind. This can be addressed in a different change.
This commit is contained in:
Louis Opter
2025-02-07 11:12:34 +00:00
committed by kenji
parent 15e8df894e
commit 5a6038f742
5 changed files with 56 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
pkgs/clan-cli/tests/test_secrets_cli.py
View File

@@ -144,18 +144,13 @@ def _test_identities(
cli.run(["secrets", what, "list", "--flake", str(test_flake.path)])
assert "foo" not in output.out
if what == "machines":
# lopter@(2025-02-02): Let's address #2659 first and then figure out
# what we wanna do about secrets when a machine is deleted.
return
user_symlink = sops_folder / "secrets" / test_secret_name / what / "foo"
user_or_machine_symlink = sops_folder / "secrets" / test_secret_name / what / "foo"
err_msg = (
f"Symlink to {what_singular} foo's key in secret "
f"{test_secret_name} was not cleaned up after "
f"{what_singular} foo was removed."
)
assert not user_symlink.exists(follow_symlinks=False), err_msg
assert not user_or_machine_symlink.exists(follow_symlinks=False), err_msg
def test_users(