Commit Graph

82 Commits

Author SHA1 Message Date
Jörg Thalheim
978d9efd7e secrets/generate-private-key: just create parent opportunistically 2023-11-16 13:19:12 +01:00
kenji
12930b4057 clan_cli: create key directory 2023-11-15 23:15:12 +01:00
Jörg Thalheim
6cb41cb006 also regenerate secrets if a fact is missing 2023-11-14 17:07:58 +01:00
lassulus
7b3d3e20b4 clan-cli secrets: flake_name -> flake_dir 2023-11-05 16:58:48 +01:00
Qubasa
c1b4fa6d55 nix fmt 2023-10-27 19:21:50 +02:00
Qubasa
3581e0c9a8 Fixing a multitude of tests 2023-10-27 19:21:50 +02:00
Qubasa
d1c35301e3 Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test 2023-10-27 19:20:17 +02:00
Qubasa
d02acbe04b nix fmt 2023-10-27 19:19:45 +02:00
Qubasa
9f464dd14e Added ipdb as breakpoint console. Improved logging. 2023-10-27 19:19:45 +02:00
Qubasa
8482bc79f6 Secrets tests passing. nix fmt doesn't complain 2023-10-27 19:18:45 +02:00
Qubasa
8cc1c2c4bd Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests 2023-10-27 19:18:45 +02:00
Qubasa
2ca54afe7f Added new type FlakeName 2023-10-27 19:18:45 +02:00
Qubasa
32e60f5adc Added flake_name:str argument everywhere, nix fmt doesn't complain anymore 2023-10-27 19:15:40 +02:00
Qubasa
fdcd7ad1d9 Updated to main 2023-10-27 19:15:11 +02:00
DavHau
dbf80595fd zerotier: fix: find free port without collissions 2023-10-05 17:03:01 +02:00
lassulus
3fb36b3ac1 secrets upload: skip on exit 23, cleanup 2023-10-04 21:29:19 +02:00
lassulus
b25af9f0f4 clan_cli: refactor secrets code into Machine class 2023-10-04 16:41:16 +02:00
lassulus
ffb7c63640 clan-cli: add machines install 2023-10-04 16:34:37 +02:00
Jörg Thalheim
b2ef8bf1a3 also test that updating a group works 2023-10-03 16:15:36 +00:00
lassulus
6f7109dab6 clan_cli.secrets.groups: update keys if members are added/removed 2023-10-03 16:15:36 +00:00
Qubasa
dbe289f702 nix fmt 2023-10-03 15:22:41 +02:00
Qubasa
8fa241a36b Fixed upload_secrets_test 2023-10-03 15:14:50 +02:00
Qubasa
7dde66c0df Fixed upload_secrets_test 2023-10-03 15:10:22 +02:00
Qubasa
be9d3d43bf Fixing PYTHONPATH in secrets/generate test 2023-10-03 15:01:13 +02:00
Qubasa
da72ec18ad API: Added test for inspect_flake 2023-10-03 13:19:20 +02:00
lassulus
89b7ffce6c clan-cli secrets upload: secrets are populated into tmpdir 2023-09-29 20:05:35 +02:00
lassulus
7ca9c49163 restore clanInternals with valid nixos config 2023-09-29 19:39:35 +02:00
Jörg Thalheim
0c91bb90ab also encrypt secret for the machine itself 2023-09-28 17:51:37 +02:00
Jörg Thalheim
16b33eb0a8 add toplevel machines-json that can deploy all hosts 2023-09-28 15:23:25 +02:00
Jörg Thalheim
756820e4ca clanInternals.machines: invert system and machine name 2023-09-27 17:26:44 +02:00
DavHau
9825c179a8 impure-tests: migrate bash to pytest and fix stuff 2023-09-22 18:32:28 +02:00
lassulus
17520e2553 fix impure tests 2023-09-21 18:29:18 +02:00
lassulus
aeed648bd0 secrets: use clanInternal for crosscompiling, move sops generators to new file 2023-09-21 17:25:32 +02:00
Jörg Thalheim
0314132a1a rewrite sops backend for secret generation and add tests 2023-09-21 17:22:20 +02:00
Jörg Thalheim
ead5c6e6a8 secrets: add has_machine and has_secret function 2023-09-21 17:22:20 +02:00
Jörg Thalheim
486ff4e7f4 age: generate private and public key in one go 2023-09-21 17:22:20 +02:00
lassulus
8d29d0e69c clan-cli: get deploymentAddress from clan.networking 2023-09-15 12:17:07 +00:00
lassulus
0132abc547 secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage 2023-09-15 12:17:07 +00:00
lassulus
c5786614bf clan-cli secrets: deploy -> upload 2023-09-15 12:17:07 +00:00
lassulus
23c979f8db secrets deploy/generate: use nix_build_machine 2023-09-15 12:17:07 +00:00
lassulus
ac13c5b76b clan-cli secrets: add deploy subcommand 2023-09-15 12:17:07 +00:00
lassulus
798e85ee8a clan secrets generate: use get_clan_flake_toplevel 2023-09-15 12:17:07 +00:00
Jörg Thalheim
17af763ad1 add edit flag to secret cli 2023-09-13 10:52:03 +02:00
Jörg Thalheim
62e5c66867 secrets cli: hint that group/user/machine flags can be repeated 2023-09-07 13:06:31 +02:00
Jörg Thalheim
c3ccf68007 only list valid secrets/users/machines
Git often leaves empty directories behind
2023-09-07 12:48:34 +02:00
Jörg Thalheim
ae3283a762 clan/secrets: fix if user/machine directory does not contain a key.json 2023-09-07 12:30:29 +02:00
Jörg Thalheim
e6762d8b3f sops: add explicit commands to generate secrets 2023-09-07 11:41:20 +02:00
Jörg Thalheim
949b72bd0b actual implement secret rename function 2023-09-03 11:03:14 +02:00
Jörg Thalheim
6c7c9b9540 secrets/sops-import: check correct secret for conflicts 2023-09-03 08:43:40 +02:00
Jörg Thalheim
e079627f0f secrets/sops-import: check for key.json to exist 2023-09-03 08:37:56 +02:00