yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

WIP: clan-cli secrets: add secret_store as python class

Browse Source
This commit is contained in:
lassulus
2024-01-15 19:34:04 +01:00
parent 3f8ddb716b
commit ed6eb50f7d
7 changed files with 237 additions and 274 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
nixosModules/clanCore/outputs.nix
View File

@@ -45,6 +45,28 @@
'';
default = "${pkgs.coreutils}/bin/true";
};
secretsModule = lib.mkOption {
type = lib.types.path;
default = "${pkgs.coreutils}/bin/true";
description = ''
the module that generates secrets.
A needs to define a python class SecretStore which implements the following methods:
set, get, exists
'';
};
secretsData = lib.mkOption {
type = lib.types.path;
description = ''
secret data as json for the generator
'';
default = pkgs.writers.writeJSON "secrets.json" (lib.mapAttrs
(_name: secret: {
secrets = builtins.attrNames secret.secrets;
facts = lib.mapAttrs (_: secret: secret.path) secret.facts;
generator = secret.generator.finalScript;
})
config.clanCore.secrets);
};
vm.create = lib.mkOption {
type = lib.types.path;
description = ''
@@ -60,7 +82,7 @@
# optimization for faster secret generate/upload and machines update
config = {
system.clan.deployment.data = {
inherit (config.system.clan) uploadSecrets generateSecrets;
inherit (config.system.clan) uploadSecrets generateSecrets secretsModule secretsData;
inherit (config.clan.networking) deploymentAddress;
inherit (config.clanCore) secretsUploadDirectory;
};