Brian McGee
aa4fe27e51
feat(clan-cli): support multiple keys for a user
2025-04-09 09:58:58 +00:00
Louis Opter
0c1244ecb6
clan-cli: secrets machines remove: update secrets after removing the key
...
Quick follow up to PR #2781 , this commit does the same kind of logic but
for machines instead of users and groups.
Note that this only affects the `clan secrets machines remove`
sub-command, and that `clan machines delete` still leaves unusable
secrets & vars behind. This can be addressed in a different change.
2025-02-13 03:53:23 +00:00
Jörg Thalheim
f2856cb773
updating groups/machines/users keys now also update vars secrets
2024-12-17 19:24:30 +01:00
Jörg Thalheim
1666513e91
Revert "Merge pull request 'Revert "Merge pull request 'clan-cli: secrets: Add support for PGP keys with sops-nix' ( #2186 ) from lopter/clan-core:lo-sops-nix-pgp-support into main"' ( #2202 ) from revert into main"
...
This reverts commit a5496e8db0 , reversing
changes made to 9bb1aef245 .
2024-10-04 16:36:35 +00:00
Jörg Thalheim
084ebf9edc
Revert "Merge pull request 'clan-cli: secrets: Add support for PGP keys with sops-nix' ( #2186 ) from lopter/clan-core:lo-sops-nix-pgp-support into main"
...
This reverts commit 5668fd05a0 , reversing
changes made to dd17fbdc6d .
Reverting for now as Dave's recent change conflicts with this change.
2024-10-04 17:54:29 +02:00
Jörg Thalheim
4cd4334b1c
secrets: do not shadow python builtins
2024-10-04 15:36:30 +00:00
Louis Opter
b2e796145a
Fix: use new sops api in clan secrets machines
2024-10-04 15:36:30 +00:00
DavHau
4a0207f0b3
sops: refactor some function names for clarity
2024-10-02 13:56:43 +02:00
DavHau
81cb28b6c0
vars/sops/shared: add machines key on demand
2024-09-12 20:17:05 +02:00
Jörg Thalheim
e150b37fb8
enable ASYNC, DTZ, YTT and EM lints
2024-09-02 14:07:06 +02:00
Jörg Thalheim
b313f2d066
make all same-module imports relative, the rest absolute
...
This makes sorting more consitent.
2024-09-02 13:00:19 +02:00
Johannes Kirschbauer
ede5cbcf13
Fix: regression list_machines. Split into multiple functions
...
list_inventory_machines, list_nixos_machine, list_sops_machines
The caller of the function should specify which machines they wants to see
2024-08-03 12:43:35 +02:00
DavHau
d7d3c404fa
sops/refactor: lay groundwork for secrets with arbitrary paths
2024-07-24 18:12:19 +07:00
Jörg Thalheim
6037ad1ce0
move FlakeId to flake id
...
move FlakeId to flake id
2024-07-03 18:28:55 +02:00
a-kenji
755d7c6470
clan: add dynamic completions to clan secrets machines
2024-06-04 15:02:35 +02:00
a-kenji
bda4e4302f
clan: add dynamic machine completions to clan secrets subcommands
2024-06-03 17:32:33 +02:00
Jörg Thalheim
84f75de34c
split list machines into show machine command
2024-05-31 16:56:09 +02:00
DavHau
e09658c817
secrets: ensure all added/deleted files get committed
2024-04-24 17:26:32 +07:00
Jörg Thalheim
00704e9e55
re-encrypt secrets after rotating users/machines keys
2024-03-25 12:34:29 +01:00
Jörg Thalheim
79e956b5c3
Also commit files when adding machines/users or removing secrets
2024-02-22 16:12:11 +01:00
lassulus
efafe6f0e3
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
9c8829c32f
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
d96ea61243
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
7bbadaa60f
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
ecdd4949b7
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
f976121fa6
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
Jörg Thalheim
ead5c6e6a8
secrets: add has_machine and has_secret function
2023-09-21 17:22:20 +02:00
Jörg Thalheim
c3ccf68007
only list valid secrets/users/machines
...
Git often leaves empty directories behind
2023-09-07 12:48:34 +02:00
Jörg Thalheim
af38408a3e
secret cli: add get command that returns the key of users/machines
2023-08-30 11:30:57 +02:00
Jörg Thalheim
c5b16124ef
add machine subcommand
2023-08-24 16:58:22 +02:00
Jörg Thalheim
6c169b0bed
print nothing if secret collections are empty
2023-08-09 14:50:04 +02:00
Jörg Thalheim
c535cf78a1
add secret api for machines/users/secrets
2023-08-09 14:10:04 +02:00
Jörg Thalheim
0533948085
fix rotating keys with sops
2023-08-08 13:44:15 +02:00
Jörg Thalheim
ae4f36ecf9
clan-cli/sops: rename add_key to write_key
2023-08-03 14:58:51 +02:00
Jörg Thalheim
54e9d4427c
fix cirular import
2023-08-03 11:07:17 +02:00
Jörg Thalheim
658c76336f
add secrets integration
...
clan-cli: also depend on age for secrets
2023-08-02 09:19:14 +00:00