Commit Graph

148 Commits

Author SHA1 Message Date
ead5c6e6a8 secrets: add has_machine and has_secret function 2023-09-21 17:22:20 +02:00
486ff4e7f4 age: generate private and public key in one go 2023-09-21 17:22:20 +02:00
8d29d0e69c clan-cli: get deploymentAddress from clan.networking 2023-09-15 12:17:07 +00:00
0132abc547 secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage 2023-09-15 12:17:07 +00:00
c5786614bf clan-cli secrets: deploy -> upload 2023-09-15 12:17:07 +00:00
23c979f8db secrets deploy/generate: use nix_build_machine 2023-09-15 12:17:07 +00:00
ac13c5b76b clan-cli secrets: add deploy subcommand 2023-09-15 12:17:07 +00:00
798e85ee8a clan secrets generate: use get_clan_flake_toplevel 2023-09-15 12:17:07 +00:00
17af763ad1 add edit flag to secret cli
All checks were successful
checks-impure / test (pull_request) Successful in 6s
checks / test (pull_request) Successful in 51s
2023-09-13 10:52:03 +02:00
62e5c66867 secrets cli: hint that group/user/machine flags can be repeated
All checks were successful
checks-impure / test (pull_request) Successful in 6s
checks / test (pull_request) Successful in 2m57s
2023-09-07 13:06:31 +02:00
c3ccf68007 only list valid secrets/users/machines
All checks were successful
checks-impure / test (pull_request) Successful in 6s
checks / test (pull_request) Successful in 58s
Git often leaves empty directories behind
2023-09-07 12:48:34 +02:00
ae3283a762 clan/secrets: fix if user/machine directory does not contain a key.json 2023-09-07 12:30:29 +02:00
e6762d8b3f sops: add explicit commands to generate secrets
All checks were successful
checks-impure / test (pull_request) Successful in 6s
checks / test (pull_request) Successful in 49s
2023-09-07 11:41:20 +02:00
949b72bd0b actual implement secret rename function
All checks were successful
checks-impure / test (pull_request) Successful in 13s
checks / test (pull_request) Successful in 24s
2023-09-03 11:03:14 +02:00
6c7c9b9540 secrets/sops-import: check correct secret for conflicts
All checks were successful
checks-impure / test (pull_request) Successful in 11s
checks / test (pull_request) Successful in 19s
2023-09-03 08:43:40 +02:00
e079627f0f secrets/sops-import: check for key.json to exist
All checks were successful
checks-impure / test (pull_request) Successful in 4s
checks / test (pull_request) Successful in 20s
2023-09-03 08:37:56 +02:00
10e4db7c19 clan-cli: fix error message 2023-08-30 16:40:42 +02:00
4afd9910e9 Revert "rename clanCore to clan.core"
This reverts commit fef796fa6e.
2023-08-30 15:24:33 +02:00
fef796fa6e rename clanCore to clan.core 2023-08-30 12:46:49 +00:00
af38408a3e secret cli: add get command that returns the key of users/machines
All checks were successful
checks-impure / test (pull_request) Successful in 3s
checks / test (pull_request) Successful in 3s
2023-08-30 11:30:57 +02:00
691d3bec41 Merge pull request 'secrets generator + zerotier module' (#188) from secrets-module into main
All checks were successful
checks-impure / test (push) Successful in 3s
checks / test (push) Successful in 2s
2023-08-29 15:43:15 +00:00
9fca1e7f43 move clanCore into nixosModules, add secrets generate command
All checks were successful
checks-impure / test (pull_request) Successful in 2s
checks / test (pull_request) Successful in 2s
2023-08-29 16:28:50 +02:00
9b3bfd6950 secrets: improve error messages
All checks were successful
checks-impure / test (pull_request) Successful in 3s
checks / test (pull_request) Successful in 19s
2023-08-29 16:20:39 +02:00
c5b16124ef add machine subcommand 2023-08-24 16:58:22 +02:00
79c61f61c7 drop black/ruff from dependency list
those are used implictly by treefmt already
2023-08-23 16:03:56 +02:00
63bb9395fd automatically import secrets into nixos 2023-08-23 13:59:43 +02:00
c2ff6acef4 sops: pass empty manifest when decrypting
All checks were successful
build / test (pull_request) Successful in 28s
2023-08-10 12:08:17 +02:00
1f79a610d4 groups: add more api
All checks were successful
build / test (pull_request) Successful in 20s
2023-08-09 15:30:50 +02:00
e103a4186c add api for secret groups and decrypting secrets
Some checks failed
build / test (pull_request) Failing after 23s
2023-08-09 15:17:43 +02:00
6c169b0bed print nothing if secret collections are empty
All checks were successful
build / test (pull_request) Successful in 29s
2023-08-09 14:50:04 +02:00
c535cf78a1 add secret api for machines/users/secrets
Some checks failed
build / test (pull_request) Failing after 21s
2023-08-09 14:10:04 +02:00
2483e29819 users: seperate cli from library
All checks were successful
build / test (pull_request) Successful in 20s
2023-08-09 13:56:24 +02:00
9189c31def improve error message if users don't exist
Some checks failed
build / test (pull_request) Failing after 17s
2023-08-09 10:33:54 +02:00
3d5a37ad03 check for breakpoint() function in code
Some checks failed
build / test (pull_request) Failing after 25s
2023-08-09 10:21:59 +02:00
68905fc233 don't add user to a secret if they already can access the secret
Some checks failed
build / test (pull_request) Failing after 21s
If the user is part of a group we don't need to add them explicitly
2023-08-09 10:17:30 +02:00
2988532909 allow to set groups/admins/users when setting secrets
All checks were successful
build / test (pull_request) Successful in 20s
2023-08-08 19:40:35 +02:00
5ee620b77b only print names when listing existing users
All checks were successful
build / test (pull_request) Successful in 16s
2023-08-08 19:07:38 +02:00
504adb4f6d make error message nicer when members are not found
All checks were successful
build / test (pull_request) Successful in 21s
2023-08-08 19:05:32 +02:00
6f9aaef56a add option to import sops secrets with groups,users,machines,prefixes
All checks were successful
build / test (pull_request) Successful in 25s
2023-08-08 18:46:37 +02:00
efa0546da5 sops: make symlinks relative
All checks were successful
build / test (pull_request) Successful in 21s
2023-08-08 17:24:40 +02:00
35f2d6a76e add dummy sops manifest
All checks were successful
build / test (pull_request) Successful in 20s
2023-08-08 16:40:32 +02:00
d8c2df2e72 add test for import-sops command
All checks were successful
build / test (pull_request) Successful in 24s
2023-08-08 16:28:38 +02:00
1d1452ddd5 add import-sops command to secrets
All checks were successful
build / test (pull_request) Successful in 21s
2023-08-08 15:48:19 +02:00
0533948085 fix rotating keys with sops
All checks were successful
build / test (push) Successful in 8s
2023-08-08 13:44:15 +02:00
ae4f36ecf9 clan-cli/sops: rename add_key to write_key
All checks were successful
build / test (push) Successful in 12s
2023-08-03 14:58:51 +02:00
54e9d4427c fix cirular import 2023-08-03 11:07:17 +02:00
dab483339a test list/remove secret 2023-08-02 12:00:32 +00:00
658c76336f add secrets integration
clan-cli: also depend on age for secrets
2023-08-02 09:19:14 +00:00