Add generation for in-repo secrets.

2026-03-19 18:16:20 -04:00
parent 4abd80ac98
commit eaf0c16c17
7 changed files with 149 additions and 7 deletions
--- a/nix/kubernetes/keys/package/k8s-keys/package.nix
+++ b/nix/kubernetes/keys/package/k8s-keys/package.nix
@@ -10,12 +10,17 @@ let
    cp ${k8s.deploy_script} $out/deploy_script
    cp ${k8s.bootstrap_script} $out/bootstrap_script
  '';
+  mrmanager_repo_secrets = runCommand "mrmanager_repo_secrets" { } ''
+    mkdir $out
+    cp -r ${k8s.mrmanager_repo_secrets} $out/mrmanager_repo_secrets
+  '';
 in
 symlinkJoin {
  name = "k8s-keys";
  paths = [
    scripts
    k8s.encryption_config
+    mrmanager_repo_secrets
  ]
  ++ (builtins.attrValues k8s.ca)
  ++ (builtins.attrValues k8s.keys)