Merge pull request 'also regenerate secrets if a fact is missing' (#508) from Mic92-sops-nix into main

2023-11-14 16:11:10 +00:00
parent ae1f177d10 6cb41cb006
commit 8968160221
1 changed files with 4 additions and 0 deletions
--- a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
+++ b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
@@ -43,7 +43,11 @@ def generate_secrets_group(
    needs_regeneration = any(
        not has_secret(flake_dir, f"{machine_name}-{secret['name']}")
        for secret in secrets.values()
+    ) or any(
+        not (flake_dir / fact["path"]).exists()
+        for fact in secret_options["facts"].values()
    )
+
    generator = secret_options["generator"]
    subdir = tempdir / secret_group
    if needs_regeneration: