32 lines
740 B
Nix
32 lines
740 B
Nix
{
|
|
k8s,
|
|
runCommand,
|
|
symlinkJoin,
|
|
...
|
|
}:
|
|
let
|
|
scripts = runCommand "scripts" { } ''
|
|
mkdir $out
|
|
cp ${k8s.deploy_script} $out/deploy_script
|
|
cp ${k8s.bootstrap_script} $out/bootstrap_script
|
|
'';
|
|
mrmanager_repo_secrets = runCommand "mrmanager_repo_secrets" { } ''
|
|
mkdir $out
|
|
cp -r ${k8s.mrmanager_repo_secrets} $out/mrmanager_repo_secrets
|
|
'';
|
|
in
|
|
symlinkJoin {
|
|
name = "k8s-keys";
|
|
paths = [
|
|
scripts
|
|
k8s.encryption_config
|
|
mrmanager_repo_secrets
|
|
]
|
|
++ (builtins.attrValues k8s.ca)
|
|
++ (builtins.attrValues k8s.keys)
|
|
++ (builtins.attrValues k8s.client-configs)
|
|
++ (builtins.attrValues k8s.ssh-keys)
|
|
++ (builtins.attrValues k8s.pgp-keys)
|
|
++ (builtins.attrValues k8s.k8s-secrets-generic);
|
|
}
|