Merge pull request 'also regenerate secrets if a fact is missing' (#508) from Mic92-sops-nix into main
This commit is contained in:
@@ -43,7 +43,11 @@ def generate_secrets_group(
|
|||||||
needs_regeneration = any(
|
needs_regeneration = any(
|
||||||
not has_secret(flake_dir, f"{machine_name}-{secret['name']}")
|
not has_secret(flake_dir, f"{machine_name}-{secret['name']}")
|
||||||
for secret in secrets.values()
|
for secret in secrets.values()
|
||||||
|
) or any(
|
||||||
|
not (flake_dir / fact["path"]).exists()
|
||||||
|
for fact in secret_options["facts"].values()
|
||||||
)
|
)
|
||||||
|
|
||||||
generator = secret_options["generator"]
|
generator = secret_options["generator"]
|
||||||
subdir = tempdir / secret_group
|
subdir = tempdir / secret_group
|
||||||
if needs_regeneration:
|
if needs_regeneration:
|
||||||
|
|||||||
Reference in New Issue
Block a user