{
  k8s,
  runCommand,
  symlinkJoin,
  ...
}:
let
  scripts = runCommand "scripts" { } ''
    mkdir $out
    cp ${k8s.deploy_script} $out/deploy_script
    cp ${k8s.bootstrap_script} $out/bootstrap_script
  '';
in
symlinkJoin {
  name = "k8s-keys";
  paths = [
    scripts
    k8s.ca
    k8s.encryption_config
  ]
  ++ (builtins.attrValues k8s.keys)
  ++ (builtins.attrValues k8s.client-configs)
  ++ (builtins.attrValues k8s.ssh-keys)
  ++ (builtins.attrValues k8s.pgp-keys)
  ++ (builtins.attrValues k8s.k8s-secrets-generic);
}