about summary refs log tree commit diff
path: root/ops/secrets/secrets.nix
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-02-01T16·35+0300
committertazjin <tazjin@tvl.su>2023-02-01T16·39+0000
commit8ed81cf755bd7129a99c1409dd2da496c13cdaa7 (patch)
tree351b997b9ba12ac6536e8a1e0df5e69ac88f4dcb /ops/secrets/secrets.nix
parentf5ccb65f26b18e576d1eb50e4a981230adb9101d (diff)
feat(ops/secrets): add flokli to terraform secrets access r/5810
Change-Id: I9ede20028560f2da0fef89dfe431609c21bda51c
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8005
Reviewed-by: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
Diffstat (limited to 'ops/secrets/secrets.nix')
-rw-r--r--ops/secrets/secrets.nix8
1 files changed, 5 insertions, 3 deletions
diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index a278b24d4bec..3f7740a2e548 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -2,6 +2,7 @@ let
   flokli = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli"
   ];
+
   tazjin = [
     # tverskoy
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
@@ -21,6 +22,7 @@ let
   sanduny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOag0XhylaTVhmT6HB8EN2Fv5Ymrc4ZfypOXONUkykTX";
   whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
 
+  terraform.publicKeys = tazjin ++ grfn ++ sterni ++ flokli;
   whitbyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ whitby ];
   allDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny whitby ];
   sandunyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny ];
@@ -46,8 +48,8 @@ in
   "owothia.age" = whitbyDefault;
   "panettone.age" = whitbyDefault;
   "smtprelay.age" = whitbyDefault;
-  "tf-buildkite.age" = whitbyDefault;
-  "tf-glesys.age" = whitbyDefault;
-  "tf-keycloak.age" = whitbyDefault;
+  "tf-buildkite.age" = terraform;
+  "tf-glesys.age" = terraform;
+  "tf-keycloak.age" = terraform;
   "tvl-alerts-bot-telegram-token.age" = whitbyDefault;
 }