{
  k8s,
  runCommand,
  symlinkJoin,
  ...
}:
let
  scripts = runCommand "scripts" { } ''
    mkdir $out
    cp ${k8s.deploy_script} $out/deploy_script
    cp ${k8s.bootstrap_script} $out/bootstrap_script
  '';
  mrmanager_repo_secrets = runCommand "mrmanager_repo_secrets" { } ''
    mkdir $out
    cp -r ${k8s.mrmanager_repo_secrets} $out/mrmanager_repo_secrets
  '';
in
symlinkJoin {
  name = "k8s-keys";
  paths = [
    scripts
    k8s.encryption_config
    mrmanager_repo_secrets
  ]
  ++ (builtins.attrValues k8s.ca)
  ++ (builtins.attrValues k8s.keys)
  ++ (builtins.attrValues k8s.client-configs)
  ++ (builtins.attrValues k8s.ssh-keys)
  ++ (builtins.attrValues k8s.pgp-keys)
  ++ (builtins.attrValues k8s.k8s-secrets-generic);
}