Commit Graph

85 Commits

Author SHA1 Message Date
Jörg Thalheim
7d755beca6 enable more linting 2023-11-29 13:29:45 +00:00
Jörg Thalheim
39617bbf03 run_upload_secrets: don't swallow stdout output 2023-11-29 11:38:01 +01:00
Jörg Thalheim
5e7d7c251e add sops command to sync keys with secrets 2023-11-29 11:34:19 +01:00
Jörg Thalheim
44fa268205 secrets/generate-private-key: just create parent opportunistically 2023-11-16 13:19:12 +01:00
kenji
f88a17ad34 clan_cli: create key directory 2023-11-15 23:15:12 +01:00
Jörg Thalheim
4514b09f81 also regenerate secrets if a fact is missing 2023-11-14 17:07:58 +01:00
lassulus
efafe6f0e3 clan-cli secrets: flake_name -> flake_dir 2023-11-05 16:58:48 +01:00
Qubasa
0be3dac289 nix fmt 2023-10-27 19:21:50 +02:00
Qubasa
8ff80b025c Fixing a multitude of tests 2023-10-27 19:21:50 +02:00
Qubasa
adffdc14f6 Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test 2023-10-27 19:20:17 +02:00
Qubasa
9c8829c32f nix fmt 2023-10-27 19:19:45 +02:00
Qubasa
6d0deefa6b Added ipdb as breakpoint console. Improved logging. 2023-10-27 19:19:45 +02:00
Qubasa
d96ea61243 Secrets tests passing. nix fmt doesn't complain 2023-10-27 19:18:45 +02:00
Qubasa
7bbadaa60f Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests 2023-10-27 19:18:45 +02:00
Qubasa
ecdd4949b7 Added new type FlakeName 2023-10-27 19:18:45 +02:00
Qubasa
f976121fa6 Added flake_name:str argument everywhere, nix fmt doesn't complain anymore 2023-10-27 19:15:40 +02:00
Qubasa
b09448ab6b Updated to main 2023-10-27 19:15:11 +02:00
DavHau
9e4c5cadf1 zerotier: fix: find free port without collissions 2023-10-05 17:03:01 +02:00
lassulus
528d0ee45a secrets upload: skip on exit 23, cleanup 2023-10-04 21:29:19 +02:00
lassulus
01087e2da8 clan_cli: refactor secrets code into Machine class 2023-10-04 16:41:16 +02:00
lassulus
1b9ea830c9 clan-cli: add machines install 2023-10-04 16:34:37 +02:00
Jörg Thalheim
c5b0787034 also test that updating a group works 2023-10-03 16:15:36 +00:00
lassulus
251a67ae9e clan_cli.secrets.groups: update keys if members are added/removed 2023-10-03 16:15:36 +00:00
Qubasa
6de1aeebb9 nix fmt 2023-10-03 15:22:41 +02:00
Qubasa
abd78293fc Fixed upload_secrets_test 2023-10-03 15:14:50 +02:00
Qubasa
d60205ea56 Fixed upload_secrets_test 2023-10-03 15:10:22 +02:00
Qubasa
5628475345 Fixing PYTHONPATH in secrets/generate test 2023-10-03 15:01:13 +02:00
Qubasa
f5bead7403 API: Added test for inspect_flake 2023-10-03 13:19:20 +02:00
lassulus
0db337d57e clan-cli secrets upload: secrets are populated into tmpdir 2023-09-29 20:05:35 +02:00
lassulus
79be9078dc restore clanInternals with valid nixos config 2023-09-29 19:39:35 +02:00
Jörg Thalheim
9a518cd816 also encrypt secret for the machine itself 2023-09-28 17:51:37 +02:00
Jörg Thalheim
82bf417e17 add toplevel machines-json that can deploy all hosts 2023-09-28 15:23:25 +02:00
Jörg Thalheim
b3f24cf815 clanInternals.machines: invert system and machine name 2023-09-27 17:26:44 +02:00
DavHau
9825c179a8 impure-tests: migrate bash to pytest and fix stuff 2023-09-22 18:32:28 +02:00
lassulus
17520e2553 fix impure tests 2023-09-21 18:29:18 +02:00
lassulus
aeed648bd0 secrets: use clanInternal for crosscompiling, move sops generators to new file 2023-09-21 17:25:32 +02:00
Jörg Thalheim
0314132a1a rewrite sops backend for secret generation and add tests 2023-09-21 17:22:20 +02:00
Jörg Thalheim
ead5c6e6a8 secrets: add has_machine and has_secret function 2023-09-21 17:22:20 +02:00
Jörg Thalheim
486ff4e7f4 age: generate private and public key in one go 2023-09-21 17:22:20 +02:00
lassulus
8d29d0e69c clan-cli: get deploymentAddress from clan.networking 2023-09-15 12:17:07 +00:00
lassulus
0132abc547 secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage 2023-09-15 12:17:07 +00:00
lassulus
c5786614bf clan-cli secrets: deploy -> upload 2023-09-15 12:17:07 +00:00
lassulus
23c979f8db secrets deploy/generate: use nix_build_machine 2023-09-15 12:17:07 +00:00
lassulus
ac13c5b76b clan-cli secrets: add deploy subcommand 2023-09-15 12:17:07 +00:00
lassulus
798e85ee8a clan secrets generate: use get_clan_flake_toplevel 2023-09-15 12:17:07 +00:00
Jörg Thalheim
17af763ad1 add edit flag to secret cli 2023-09-13 10:52:03 +02:00
Jörg Thalheim
62e5c66867 secrets cli: hint that group/user/machine flags can be repeated 2023-09-07 13:06:31 +02:00
Jörg Thalheim
c3ccf68007 only list valid secrets/users/machines
Git often leaves empty directories behind
2023-09-07 12:48:34 +02:00
Jörg Thalheim
ae3283a762 clan/secrets: fix if user/machine directory does not contain a key.json 2023-09-07 12:30:29 +02:00
Jörg Thalheim
e6762d8b3f sops: add explicit commands to generate secrets 2023-09-07 11:41:20 +02:00