Qubasa
|
d60205ea56
|
Fixed upload_secrets_test
|
2023-10-03 15:10:22 +02:00 |
|
Qubasa
|
5628475345
|
Fixing PYTHONPATH in secrets/generate test
|
2023-10-03 15:01:13 +02:00 |
|
Qubasa
|
f5bead7403
|
API: Added test for inspect_flake
|
2023-10-03 13:19:20 +02:00 |
|
lassulus
|
0db337d57e
|
clan-cli secrets upload: secrets are populated into tmpdir
|
2023-09-29 20:05:35 +02:00 |
|
lassulus
|
79be9078dc
|
restore clanInternals with valid nixos config
|
2023-09-29 19:39:35 +02:00 |
|
Jörg Thalheim
|
9a518cd816
|
also encrypt secret for the machine itself
|
2023-09-28 17:51:37 +02:00 |
|
Jörg Thalheim
|
82bf417e17
|
add toplevel machines-json that can deploy all hosts
|
2023-09-28 15:23:25 +02:00 |
|
Jörg Thalheim
|
b3f24cf815
|
clanInternals.machines: invert system and machine name
|
2023-09-27 17:26:44 +02:00 |
|
DavHau
|
9825c179a8
|
impure-tests: migrate bash to pytest and fix stuff
|
2023-09-22 18:32:28 +02:00 |
|
lassulus
|
17520e2553
|
fix impure tests
|
2023-09-21 18:29:18 +02:00 |
|
lassulus
|
aeed648bd0
|
secrets: use clanInternal for crosscompiling, move sops generators to new file
|
2023-09-21 17:25:32 +02:00 |
|
Jörg Thalheim
|
0314132a1a
|
rewrite sops backend for secret generation and add tests
|
2023-09-21 17:22:20 +02:00 |
|
Jörg Thalheim
|
ead5c6e6a8
|
secrets: add has_machine and has_secret function
|
2023-09-21 17:22:20 +02:00 |
|
Jörg Thalheim
|
486ff4e7f4
|
age: generate private and public key in one go
|
2023-09-21 17:22:20 +02:00 |
|
lassulus
|
8d29d0e69c
|
clan-cli: get deploymentAddress from clan.networking
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
0132abc547
|
secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
c5786614bf
|
clan-cli secrets: deploy -> upload
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
23c979f8db
|
secrets deploy/generate: use nix_build_machine
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
ac13c5b76b
|
clan-cli secrets: add deploy subcommand
|
2023-09-15 12:17:07 +00:00 |
|
lassulus
|
798e85ee8a
|
clan secrets generate: use get_clan_flake_toplevel
|
2023-09-15 12:17:07 +00:00 |
|
Jörg Thalheim
|
17af763ad1
|
add edit flag to secret cli
|
2023-09-13 10:52:03 +02:00 |
|
Jörg Thalheim
|
62e5c66867
|
secrets cli: hint that group/user/machine flags can be repeated
|
2023-09-07 13:06:31 +02:00 |
|
Jörg Thalheim
|
c3ccf68007
|
only list valid secrets/users/machines
Git often leaves empty directories behind
|
2023-09-07 12:48:34 +02:00 |
|
Jörg Thalheim
|
ae3283a762
|
clan/secrets: fix if user/machine directory does not contain a key.json
|
2023-09-07 12:30:29 +02:00 |
|
Jörg Thalheim
|
e6762d8b3f
|
sops: add explicit commands to generate secrets
|
2023-09-07 11:41:20 +02:00 |
|
Jörg Thalheim
|
949b72bd0b
|
actual implement secret rename function
|
2023-09-03 11:03:14 +02:00 |
|
Jörg Thalheim
|
6c7c9b9540
|
secrets/sops-import: check correct secret for conflicts
|
2023-09-03 08:43:40 +02:00 |
|
Jörg Thalheim
|
e079627f0f
|
secrets/sops-import: check for key.json to exist
|
2023-09-03 08:37:56 +02:00 |
|
Jörg Thalheim
|
10e4db7c19
|
clan-cli: fix error message
|
2023-08-30 16:40:42 +02:00 |
|
DavHau
|
4afd9910e9
|
Revert "rename clanCore to clan.core"
This reverts commit fef796fa6e.
|
2023-08-30 15:24:33 +02:00 |
|
Jörg Thalheim
|
fef796fa6e
|
rename clanCore to clan.core
|
2023-08-30 12:46:49 +00:00 |
|
Jörg Thalheim
|
af38408a3e
|
secret cli: add get command that returns the key of users/machines
|
2023-08-30 11:30:57 +02:00 |
|
clan-bot
|
691d3bec41
|
Merge pull request 'secrets generator + zerotier module' (#188) from secrets-module into main
|
2023-08-29 15:43:15 +00:00 |
|
lassulus
|
9fca1e7f43
|
move clanCore into nixosModules, add secrets generate command
|
2023-08-29 16:28:50 +02:00 |
|
Jörg Thalheim
|
9b3bfd6950
|
secrets: improve error messages
|
2023-08-29 16:20:39 +02:00 |
|
Jörg Thalheim
|
c5b16124ef
|
add machine subcommand
|
2023-08-24 16:58:22 +02:00 |
|
Jörg Thalheim
|
79c61f61c7
|
drop black/ruff from dependency list
those are used implictly by treefmt already
|
2023-08-23 16:03:56 +02:00 |
|
Jörg Thalheim
|
63bb9395fd
|
automatically import secrets into nixos
|
2023-08-23 13:59:43 +02:00 |
|
Jörg Thalheim
|
c2ff6acef4
|
sops: pass empty manifest when decrypting
|
2023-08-10 12:08:17 +02:00 |
|
Jörg Thalheim
|
1f79a610d4
|
groups: add more api
|
2023-08-09 15:30:50 +02:00 |
|
Jörg Thalheim
|
e103a4186c
|
add api for secret groups and decrypting secrets
|
2023-08-09 15:17:43 +02:00 |
|
Jörg Thalheim
|
6c169b0bed
|
print nothing if secret collections are empty
|
2023-08-09 14:50:04 +02:00 |
|
Jörg Thalheim
|
c535cf78a1
|
add secret api for machines/users/secrets
|
2023-08-09 14:10:04 +02:00 |
|
Jörg Thalheim
|
2483e29819
|
users: seperate cli from library
|
2023-08-09 13:56:24 +02:00 |
|
Jörg Thalheim
|
9189c31def
|
improve error message if users don't exist
|
2023-08-09 10:33:54 +02:00 |
|
Jörg Thalheim
|
3d5a37ad03
|
check for breakpoint() function in code
|
2023-08-09 10:21:59 +02:00 |
|
Jörg Thalheim
|
68905fc233
|
don't add user to a secret if they already can access the secret
If the user is part of a group we don't need to add them explicitly
|
2023-08-09 10:17:30 +02:00 |
|
Jörg Thalheim
|
2988532909
|
allow to set groups/admins/users when setting secrets
|
2023-08-08 19:40:35 +02:00 |
|
Jörg Thalheim
|
5ee620b77b
|
only print names when listing existing users
|
2023-08-08 19:07:38 +02:00 |
|
Jörg Thalheim
|
504adb4f6d
|
make error message nicer when members are not found
|
2023-08-08 19:05:32 +02:00 |
|