Fix: do not assume users use age keys in vars/sops
With added support for PGP for users keys, do not assume an age key is going to be present in secrets files.
This commit is contained in:
@@ -229,7 +229,7 @@ class SecretStore(SecretStoreBase):
|
||||
) -> bool:
|
||||
secret_path = self.secret_path(generator_name, secret_name, shared)
|
||||
secret = json.loads((secret_path / "secret").read_text())
|
||||
recipients = [r["recipient"] for r in secret["sops"]["age"]]
|
||||
recipients = [r["recipient"] for r in (secret["sops"].get("age") or [])]
|
||||
machines_folder_path = sops_machines_folder(self.machine.flake_dir)
|
||||
machine_pubkey = json.loads(
|
||||
(machines_folder_path / self.machine.name / "key.json").read_text()
|
||||
|
||||
Reference in New Issue
Block a user