Brian McGee
651b277bb9
feat: configure age plugins for SOPS in buildClan
2025-04-29 16:02:32 +10:00
Jörg Thalheim
527154070c
use pathlib.iterdir() everywhere
2025-03-18 15:34:06 +01:00
Louis Opter
0c1244ecb6
clan-cli: secrets machines remove: update secrets after removing the key
...
Quick follow up to PR #2781 , this commit does the same kind of logic but
for machines instead of users and groups.
Note that this only affects the `clan secrets machines remove`
sub-command, and that `clan machines delete` still leaves unusable
secrets & vars behind. This can be addressed in a different change.
2025-02-13 03:53:23 +00:00
Louis Opter
48268f7960
clan-cli: do not skip secrets.update_secrets when a group is removed
...
We need to remove all keys that were in the group from affected secrets.
With this change we now take `group_name` as an argument in
`{add,remove}_member`, which is a little bit more readable than
`group_folder.parent.name`, and helps DRY the code a bit.
2025-02-04 03:13:20 +00:00
Louis Opter
26d07cf1f5
clan-cli: secrets: commit changes when group members are added or removed
2025-02-04 03:13:20 +00:00
Jörg Thalheim
f2856cb773
updating groups/machines/users keys now also update vars secrets
2024-12-17 19:24:30 +01:00
DavHau
8b94bc71bc
vars: allow re-encrypting secrets when recipient keys were added.
...
When the users of a secret change, when for example a new admin user is added, an error will be thrown when generating vars, prompting the user to pass --fix to re-encrypt the secrets
2024-11-13 18:49:30 +07:00
Jörg Thalheim
1fa0e72bea
use pathlib everywhere
2024-09-02 18:26:13 +02:00
Jörg Thalheim
e150b37fb8
enable ASYNC, DTZ, YTT and EM lints
2024-09-02 14:07:06 +02:00
Jörg Thalheim
22d6e5e153
enable comprehensions linting rules
2024-09-02 13:35:52 +02:00
Jörg Thalheim
b313f2d066
make all same-module imports relative, the rest absolute
...
This makes sorting more consitent.
2024-09-02 13:00:19 +02:00
DavHau
d7d3c404fa
sops/refactor: lay groundwork for secrets with arbitrary paths
2024-07-24 18:12:19 +07:00
Jörg Thalheim
6037ad1ce0
move FlakeId to flake id
...
move FlakeId to flake id
2024-07-03 18:28:55 +02:00
a-kenji
10ab6f0155
clan: add dynamic completion for clan secret groups
2024-06-04 13:30:38 +02:00
a-kenji
0661051baa
clan: clan secrets groups add machine completions
2024-06-04 13:30:11 +02:00
a-kenji
b9046cbae0
clan: fix help message
2024-06-04 10:28:34 +00:00
DavHau
e09658c817
secrets: ensure all added/deleted files get committed
2024-04-24 17:26:32 +07:00
lassulus
efafe6f0e3
clan-cli secrets: flake_name -> flake_dir
2023-11-05 16:58:48 +01:00
Qubasa
9c8829c32f
nix fmt
2023-10-27 19:19:45 +02:00
Qubasa
d96ea61243
Secrets tests passing. nix fmt doesn't complain
2023-10-27 19:18:45 +02:00
Qubasa
7bbadaa60f
Fixed cyclic dependencie AND swapped pytest-parallel for pytest-xdist to fix deadlock in tests
2023-10-27 19:18:45 +02:00
Qubasa
ecdd4949b7
Added new type FlakeName
2023-10-27 19:18:45 +02:00
Qubasa
f976121fa6
Added flake_name:str argument everywhere, nix fmt doesn't complain anymore
2023-10-27 19:15:40 +02:00
lassulus
251a67ae9e
clan_cli.secrets.groups: update keys if members are added/removed
2023-10-03 16:15:36 +00:00
Jörg Thalheim
10e4db7c19
clan-cli: fix error message
2023-08-30 16:40:42 +02:00
Jörg Thalheim
c5b16124ef
add machine subcommand
2023-08-24 16:58:22 +02:00
Jörg Thalheim
1f79a610d4
groups: add more api
2023-08-09 15:30:50 +02:00
Jörg Thalheim
e103a4186c
add api for secret groups and decrypting secrets
2023-08-09 15:17:43 +02:00
Jörg Thalheim
5ee620b77b
only print names when listing existing users
2023-08-08 19:07:38 +02:00
Jörg Thalheim
504adb4f6d
make error message nicer when members are not found
2023-08-08 19:05:32 +02:00
Jörg Thalheim
efa0546da5
sops: make symlinks relative
2023-08-08 17:24:40 +02:00
Jörg Thalheim
0533948085
fix rotating keys with sops
2023-08-08 13:44:15 +02:00
Jörg Thalheim
658c76336f
add secrets integration
...
clan-cli: also depend on age for secrets
2023-08-02 09:19:14 +00:00
