sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use nix to generate .sops.yaml

Browse source
This commit is contained in:
zowoq 2024-12-16 08:34:28 +10:00
parent 01137d599d
commit 7478e0268a
6 changed files with 86 additions and 53 deletions

6
tasks.py
View file

@ -65,8 +65,12 @@ def update_agenix_files(c: Any) -> None:
@task
def update_sops_files(c: Any) -> None:
"""
Update all sops yaml files according to .sops.yaml rules
Update all sops yaml files according to sops.nix rules
"""
with open(f"{ROOT}/.sops.yaml", "w") as f:
print("# AUTOMATICALLY GENERATED WITH: $ inv update-sops-files", file=f)
c.run(f"nix eval --json -f {ROOT}/sops.nix | yq e -P - >> {ROOT}/.sops.yaml")
c.run("shopt -s globstar && sops updatekeys --yes **/secrets.yaml")