DavHau
|
9825c179a8
|
impure-tests: migrate bash to pytest and fix stuff
|
2023-09-22 18:32:28 +02:00 |
|
lassulus
|
17520e2553
|
fix impure tests
|
2023-09-21 18:29:18 +02:00 |
|
lassulus
|
aeed648bd0
|
secrets: use clanInternal for crosscompiling, move sops generators to new file
|
2023-09-21 17:25:32 +02:00 |
|
Jörg Thalheim
|
0314132a1a
|
rewrite sops backend for secret generation and add tests
|
2023-09-21 17:22:20 +02:00 |
|
Jörg Thalheim
|
ead5c6e6a8
|
secrets: add has_machine and has_secret function
|
2023-09-21 17:22:20 +02:00 |
|
Jörg Thalheim
|
486ff4e7f4
|
age: generate private and public key in one go
|
2023-09-21 17:22:20 +02:00 |
|
lassulus
|
8d29d0e69c
|
clan-cli: get deploymentAddress from clan.networking
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
0132abc547
|
secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
c5786614bf
|
clan-cli secrets: deploy -> upload
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
23c979f8db
|
secrets deploy/generate: use nix_build_machine
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
ac13c5b76b
|
clan-cli secrets: add deploy subcommand
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
798e85ee8a
|
clan secrets generate: use get_clan_flake_toplevel
|
2023-09-15 12:17:07 +00:00 |
|
Jörg Thalheim
|
17af763ad1
|
add edit flag to secret cli
|
2023-09-13 10:52:03 +02:00 |
|
Jörg Thalheim
|
62e5c66867
|
secrets cli: hint that group/user/machine flags can be repeated
|
2023-09-07 13:06:31 +02:00 |
|
Jörg Thalheim
|
c3ccf68007
|
only list valid secrets/users/machines
Git often leaves empty directories behind
|
2023-09-07 12:48:34 +02:00 |
|
Jörg Thalheim
|
ae3283a762
|
clan/secrets: fix if user/machine directory does not contain a key.json
|
2023-09-07 12:30:29 +02:00 |
|
Jörg Thalheim
|
e6762d8b3f
|
sops: add explicit commands to generate secrets
|
2023-09-07 11:41:20 +02:00 |
|
Jörg Thalheim
|
949b72bd0b
|
actual implement secret rename function
|
2023-09-03 11:03:14 +02:00 |
|
Jörg Thalheim
|
6c7c9b9540
|
secrets/sops-import: check correct secret for conflicts
|
2023-09-03 08:43:40 +02:00 |
|
Jörg Thalheim
|
e079627f0f
|
secrets/sops-import: check for key.json to exist
|
2023-09-03 08:37:56 +02:00 |
|
Jörg Thalheim
|
10e4db7c19
|
clan-cli: fix error message
|
2023-08-30 16:40:42 +02:00 |
|
DavHau
|
4afd9910e9
|
Revert "rename clanCore to clan.core"
This reverts commit fef796fa6e.
|
2023-08-30 15:24:33 +02:00 |
|
Jörg Thalheim
|
fef796fa6e
|
rename clanCore to clan.core
|
2023-08-30 12:46:49 +00:00 |
|
Jörg Thalheim
|
af38408a3e
|
secret cli: add get command that returns the key of users/machines
|
2023-08-30 11:30:57 +02:00 |
|
clan-bot
|
691d3bec41
|
Merge pull request 'secrets generator + zerotier module' (#188) from secrets-module into main
|
2023-08-29 15:43:15 +00:00 |
|
lassulus
|
9fca1e7f43
|
move clanCore into nixosModules, add secrets generate command
|
2023-08-29 16:28:50 +02:00 |
|
Jörg Thalheim
|
9b3bfd6950
|
secrets: improve error messages
|
2023-08-29 16:20:39 +02:00 |
|
Jörg Thalheim
|
c5b16124ef
|
add machine subcommand
|
2023-08-24 16:58:22 +02:00 |
|
Jörg Thalheim
|
79c61f61c7
|
drop black/ruff from dependency list
those are used implictly by treefmt already
|
2023-08-23 16:03:56 +02:00 |
|
Jörg Thalheim
|
63bb9395fd
|
automatically import secrets into nixos
|
2023-08-23 13:59:43 +02:00 |
|
Jörg Thalheim
|
c2ff6acef4
|
sops: pass empty manifest when decrypting
|
2023-08-10 12:08:17 +02:00 |
|
Jörg Thalheim
|
1f79a610d4
|
groups: add more api
|
2023-08-09 15:30:50 +02:00 |
|
Jörg Thalheim
|
e103a4186c
|
add api for secret groups and decrypting secrets
|
2023-08-09 15:17:43 +02:00 |
|
Jörg Thalheim
|
6c169b0bed
|
print nothing if secret collections are empty
|
2023-08-09 14:50:04 +02:00 |
|
Jörg Thalheim
|
c535cf78a1
|
add secret api for machines/users/secrets
|
2023-08-09 14:10:04 +02:00 |
|
Jörg Thalheim
|
2483e29819
|
users: seperate cli from library
|
2023-08-09 13:56:24 +02:00 |
|
Jörg Thalheim
|
9189c31def
|
improve error message if users don't exist
|
2023-08-09 10:33:54 +02:00 |
|
Jörg Thalheim
|
3d5a37ad03
|
check for breakpoint() function in code
|
2023-08-09 10:21:59 +02:00 |
|
Jörg Thalheim
|
68905fc233
|
don't add user to a secret if they already can access the secret
If the user is part of a group we don't need to add them explicitly
|
2023-08-09 10:17:30 +02:00 |
|
Jörg Thalheim
|
2988532909
|
allow to set groups/admins/users when setting secrets
|
2023-08-08 19:40:35 +02:00 |
|
Jörg Thalheim
|
5ee620b77b
|
only print names when listing existing users
|
2023-08-08 19:07:38 +02:00 |
|
Jörg Thalheim
|
504adb4f6d
|
make error message nicer when members are not found
|
2023-08-08 19:05:32 +02:00 |
|
Jörg Thalheim
|
6f9aaef56a
|
add option to import sops secrets with groups,users,machines,prefixes
|
2023-08-08 18:46:37 +02:00 |
|
Jörg Thalheim
|
efa0546da5
|
sops: make symlinks relative
|
2023-08-08 17:24:40 +02:00 |
|
Jörg Thalheim
|
35f2d6a76e
|
add dummy sops manifest
|
2023-08-08 16:40:32 +02:00 |
|
Jörg Thalheim
|
d8c2df2e72
|
add test for import-sops command
|
2023-08-08 16:28:38 +02:00 |
|
Jörg Thalheim
|
1d1452ddd5
|
add import-sops command to secrets
|
2023-08-08 15:48:19 +02:00 |
|
Jörg Thalheim
|
0533948085
|
fix rotating keys with sops
|
2023-08-08 13:44:15 +02:00 |
|
Jörg Thalheim
|
ae4f36ecf9
|
clan-cli/sops: rename add_key to write_key
|
2023-08-03 14:58:51 +02:00 |
|
Jörg Thalheim
|
54e9d4427c
|
fix cirular import
|
2023-08-03 11:07:17 +02:00 |
|