Brian McGee
ed5fc20069
feat(clan-cli): support multiple keys for a user
2025-04-09 09:58:58 +00:00
Louis Opter
5a6038f742
clan-cli: secrets machines remove: update secrets after removing the key
...
Quick follow up to PR #2781 , this commit does the same kind of logic but
for machines instead of users and groups.
Note that this only affects the `clan secrets machines remove`
sub-command, and that `clan machines delete` still leaves unusable
secrets & vars behind. This can be addressed in a different change.
2025-02-13 03:53:23 +00:00
Jörg Thalheim
7466445653
updating groups/machines/users keys now also update vars secrets
2024-12-17 19:24:30 +01:00
Jörg Thalheim
76aa8d2d82
Revert "Merge pull request 'Revert "Merge pull request 'clan-cli: secrets: Add support for PGP keys with sops-nix' ( #2186 ) from lopter/clan-core:lo-sops-nix-pgp-support into main"' ( #2202 ) from revert into main"
...
This reverts commit 23f5abee0d , reversing
changes made to 66a94c91ae .
2024-10-04 16:36:35 +00:00
Jörg Thalheim
d134d94a1e
Revert "Merge pull request 'clan-cli: secrets: Add support for PGP keys with sops-nix' ( #2186 ) from lopter/clan-core:lo-sops-nix-pgp-support into main"
...
This reverts commit b956b94039 , reversing
changes made to b1af3d5d6d .
Reverting for now as Dave's recent change conflicts with this change.
2024-10-04 17:54:29 +02:00
Jörg Thalheim
24973370b3
secrets: do not shadow python builtins
2024-10-04 15:36:30 +00:00
Louis Opter
30d0afe75b
Fix: use new sops api in clan secrets machines
2024-10-04 15:36:30 +00:00
DavHau
1f1be62c60
sops: refactor some function names for clarity
2024-10-02 13:56:43 +02:00
DavHau
a1dd10f502
vars/sops/shared: add machines key on demand
2024-09-12 20:17:05 +02:00
Jörg Thalheim
15ff74f7c2
enable ASYNC, DTZ, YTT and EM lints
2024-09-02 14:07:06 +02:00
Jörg Thalheim
af4b9cc2d5
make all same-module imports relative, the rest absolute
...
This makes sorting more consitent.
2024-09-02 13:00:19 +02:00
Johannes Kirschbauer
91397adbfc
Fix: regression list_machines. Split into multiple functions
...
list_inventory_machines, list_nixos_machine, list_sops_machines
The caller of the function should specify which machines they wants to see
2024-08-03 12:43:35 +02:00
DavHau
ac5d421f84
sops/refactor: lay groundwork for secrets with arbitrary paths
2024-07-24 18:12:19 +07:00
Jörg Thalheim
5b606c035f
move FlakeId to flake id
...
move FlakeId to flake id
2024-07-03 18:28:55 +02:00
a-kenji
e1d6d04b48
clan: add dynamic completions to clan secrets machines
2024-06-04 15:02:35 +02:00
a-kenji
cfb78b0edb
clan: add dynamic machine completions to clan secrets subcommands
2024-06-03 17:32:33 +02:00
Jörg Thalheim
788eae432a
split list machines into show machine command
2024-05-31 16:56:09 +02:00
DavHau
cf67de2f69
secrets: ensure all added/deleted files get committed
2024-04-24 17:26:32 +07:00
Jörg Thalheim
0fa36252c2
re-encrypt secrets after rotating users/machines keys
2024-03-25 12:34:29 +01:00
Jörg Thalheim
52fcc91479
Also commit files when adding machines/users or removing secrets
2024-02-22 16:12:11 +01:00
lassulus
7b3d3e20b4
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
d02acbe04b
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
8482bc79f6
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
8cc1c2c4bd
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
2ca54afe7f
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
32e60f5adc
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
Jörg Thalheim
ead5c6e6a8
secrets: add has_machine and has_secret function
2023-09-21 17:22:20 +02:00
Jörg Thalheim
c3ccf68007
only list valid secrets/users/machines
...
Git often leaves empty directories behind
2023-09-07 12:48:34 +02:00
Jörg Thalheim
af38408a3e
secret cli: add get command that returns the key of users/machines
2023-08-30 11:30:57 +02:00
Jörg Thalheim
c5b16124ef
add machine subcommand
2023-08-24 16:58:22 +02:00
Jörg Thalheim
6c169b0bed
print nothing if secret collections are empty
2023-08-09 14:50:04 +02:00
Jörg Thalheim
c535cf78a1
add secret api for machines/users/secrets
2023-08-09 14:10:04 +02:00
Jörg Thalheim
0533948085
fix rotating keys with sops
2023-08-08 13:44:15 +02:00
Jörg Thalheim
ae4f36ecf9
clan-cli/sops: rename add_key to write_key
2023-08-03 14:58:51 +02:00
Jörg Thalheim
54e9d4427c
fix cirular import
2023-08-03 11:07:17 +02:00
Jörg Thalheim
658c76336f
add secrets integration
...
clan-cli: also depend on age for secrets
2023-08-02 09:19:14 +00:00