Qubasa
a60978240c
Fix template. Improve docu. Add disko as default imported module.
2024-05-10 15:39:46 +02:00
Jörg Thalheim
4b2c0cbd39
sops: fix setting secret from pipe
2024-04-30 14:04:49 +02:00
Jörg Thalheim
92f96e8a45
sops: also log content type on error
2024-04-30 13:56:07 +02:00
DavHau
e09658c817
secrets: ensure all added/deleted files get committed
2024-04-24 17:26:32 +07:00
DavHau
83899aa054
cli/secrets: show hint in --help on how to retrieve a key
2024-04-02 14:36:01 +07:00
Jörg Thalheim
00704e9e55
re-encrypt secrets after rotating users/machines keys
2024-03-25 12:34:29 +01:00
Jörg Thalheim
a395d4a8fb
add hint to use --force when a key already exists
2024-03-25 11:06:20 +01:00
lassulus
8d34c51df2
refactor secrets & facts -> secret_facts & public_facts
2024-03-23 05:46:54 +01:00
Jörg Thalheim
6bcddae692
allow multi-line interactive secrets
2024-03-13 11:18:56 +01:00
lassulus
1d5605fa4a
clan-cli sops: accept bytes
2024-03-03 09:25:40 +01:00
lassulus
393db0d6f7
clan_cli secrets generate: fix type in error msg
2024-03-03 08:40:22 +01:00
lassulus
cde452f99b
clan-cli sops: fix super class interface compliance
2024-03-03 06:20:08 +01:00
lassulus
ed604a7ded
clan-cli secrets: actually check if only service needs regeneration
2024-03-03 06:20:08 +01:00
lassulus
9880dede41
clan-cli: add interactive secrets/fact generation
2024-03-03 04:06:18 +01:00
lassulus
e74b586576
outputs: pass secretsData directly
2024-03-02 11:43:20 +01:00
Jörg Thalheim
79e956b5c3
Also commit files when adding machines/users or removing secrets
2024-02-22 16:12:11 +01:00
Jörg Thalheim
52d357ee42
secrets: commit when renaming secrets
2024-02-22 15:59:12 +01:00
Jörg Thalheim
dd98cac94e
secret cli: accept a pattern in secrets list
2024-02-22 14:21:53 +01:00
Jörg Thalheim
a214677da0
secret_store: drop update_check and generate_hash as abstract methods
...
Only password implements those just now
2024-02-20 18:58:38 +01:00
Jörg Thalheim
38e5e4f12c
secrets: add git support when updating secrets
2024-02-20 12:41:52 +01:00
Jörg Thalheim
43a8da1485
sops: unbreak edit flags
2024-02-20 11:07:00 +01:00
Jörg Thalheim
1d1358cdc9
improve error message if group does not exists
2024-02-16 17:26:20 +01:00
Jörg Thalheim
023b9f4257
add option to set defaultGroups for secrets
2024-02-16 17:26:20 +01:00
Jörg Thalheim
052f040017
upload_secrets: call update_check directly without introspection
2024-02-16 14:57:01 +01:00
Jörg Thalheim
8eac6992c7
split of generate_secrets method into smaller functions
2024-02-16 14:48:46 +01:00
Jörg Thalheim
587812ebc9
make secrets stores inherit from an interface
2024-02-16 14:47:28 +01:00
lassulus
5ed4881687
vms: use vm fact/secret-store
2024-02-15 10:41:25 +01:00
lassulus
e3627c12f7
add factsStore modules
2024-02-15 10:41:25 +01:00
Jörg Thalheim
5e5077c31c
rename machine.host to machine.target_host
2024-02-06 17:21:42 +01:00
lassulus
9585883e80
clan-cli secrets: commit facts/secrets after generating them
2024-02-05 10:03:10 +01:00
lassulus
e94983be21
clan-cli secrets: remove debug output
2024-02-05 10:03:10 +01:00
lassulus
8cbedfd3b8
clan-cli password-store: remove debug print
2024-02-02 17:40:19 +01:00
lassulus
ece289d0cc
clan-cli secrets: add check command
2024-02-02 17:40:19 +01:00
lassulus
59c09a114c
secrets modules: pass secrets as bytes
2024-01-30 12:11:05 +01:00
lassulus
140973270a
secrets: add sandbox user
2024-01-30 12:11:05 +01:00
lassulus
1b9445b71f
clan-cli secrets: generate secrets inside bubblewrap
2024-01-24 19:20:07 +01:00
lassulus
bdd1f9be6d
machines.Machine: refactor flake_dir -> flake; use Machine class in vm
2024-01-24 15:49:12 +01:00
lassulus
1d4e533438
move secret stores into clan_cli codebase
2024-01-24 15:49:12 +01:00
lassulus
ed6eb50f7d
WIP: clan-cli secrets: add secret_store as python class
2024-01-23 15:04:40 +01:00
Qubasa
38e2c29f08
cmd.py refactor part 6
2024-01-12 17:02:56 +01:00
Qubasa
6b39ea5592
cmd.py refactor part 5
2024-01-12 16:52:34 +01:00
Qubasa
c56e1d1684
cmd.py: Fix deadlock because of incorrect select usage
2024-01-11 23:03:14 +01:00
Qubasa
2c6c4bacce
Identified deadlocking funciton
2024-01-11 22:28:35 +01:00
Qubasa
3ed58de082
Fixed missing log.BOTH and error_msg at prev refactors
2024-01-11 21:11:49 +01:00
Qubasa
13ba1440bd
cmd.py refactor part 4
2024-01-11 21:11:49 +01:00
Jörg Thalheim
0e91f8721f
prefix nixpkgs# explicitly in nix_shell
...
This makes the function usage less confusing (you can now tell from the call side what are flags and what is passed to nix-shell) and allows to use different flakes to download packages.
2023-12-08 15:14:14 +01:00
Jörg Thalheim
f208bc0f22
add option to extend path for generator
2023-11-30 14:15:40 +01:00
Jörg Thalheim
ed472a6425
error if age key cannot be decoded
2023-11-30 10:57:58 +01:00
Jörg Thalheim
6f0722c692
modernisation for python 3.11
2023-11-29 13:29:45 +00:00
Jörg Thalheim
7d755beca6
enable more linting
2023-11-29 13:29:45 +00:00
