diff options
| author | Vincent Ambo <tazjin@google.com> | 2019-09-03T15·10+0100 |
|---|---|---|
| committer | Vincent Ambo <tazjin@google.com> | 2019-09-03T15·12+0100 |
| commit | 283951388c96e871c9c4a835eee6594fc27e08c0 (patch) | |
| tree | fe6be2f9756627ac09c3207f876430921789baec /infra/kubernetes/nixery/known_hosts | |
| parent | 0bc548e75e7e06ee4ad172449f818d7e4b861b1d (diff) | |
feat(k8s): Insert Nixery's secrets via kontemplate
Instead of having a manually prepared secret, use Cloud KMS (as per the previous commits) to decrypt the in-repo secrets and template them into the Secret resource in Kubernetes. Not all of the values are actually secret, it has thus become a bit easier to edit the known hosts, SSH config and such now.
Diffstat (limited to 'infra/kubernetes/nixery/known_hosts')
| -rw-r--r-- | infra/kubernetes/nixery/known_hosts | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/infra/kubernetes/nixery/known_hosts b/infra/kubernetes/nixery/known_hosts new file mode 100644 index 000000000000..1bae52b8991a --- /dev/null +++ b/infra/kubernetes/nixery/known_hosts @@ -0,0 +1 @@ +github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ== |