Generate pgp keys for sops.

2025-12-21 14:17:31 -05:00
parent cd313e673b
commit 651a97d126
3 changed files with 65 additions and 1 deletions
--- a/nix/kubernetes/keys/scope.nix
+++ b/nix/kubernetes/keys/scope.nix
@@ -101,6 +101,19 @@ makeScope newScope (
        "flux_ssh_key"
      ] (key_name: (callPackage ./package/ssh-key/package.nix (additional_vars // { inherit key_name; })))
    );
+    pgp-keys = (
+      builtins.mapAttrs
+        (
+          key_name: key_config:
+          (callPackage ./package/pgp-key/package.nix (additional_vars // { inherit key_name; } // key_config))
+        )
+        {
+          "flux_gpg" = {
+            pgp_comment = "flux secrets";
+            pgp_name = "flux sops";
+          };
+        }
+    );
    client-configs = (
      builtins.mapAttrs
        (