about summary refs log tree commit diff
path: root/ops/secrets
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-25T21·03+0300
committerclbot <clbot@tvl.fyi>2021-12-25T21·15+0000
commite4d20cdaeca9b237bc716e198ae61d91f303acbc (patch)
tree8965f62b37c2294526ec5027280f036a30622a6a /ops/secrets
parentd8a1802b3ed804fb26c50a6f23036aede1ac1182 (diff)
refactor(ops/whitby): Move Gerrit secrets into agenix r/3402
Gerrit has OAuth2 and email related secrets which now live in agenix
instead of a random file on disk.

Change-Id: I6220fbb7a2e2ec0102a900b4bcf6150b8b4d32ef
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4612
Tested-by: BuildkiteCI
Autosubmit: tazjin <mail@tazj.in>
Reviewed-by: lukegb <lukegb@tvl.fyi>
Diffstat (limited to 'ops/secrets')
-rw-r--r--ops/secrets/gerrit-secrets.age15
-rw-r--r--ops/secrets/secrets.nix1
2 files changed, 16 insertions, 0 deletions
diff --git a/ops/secrets/gerrit-secrets.age b/ops/secrets/gerrit-secrets.age
new file mode 100644
index 000000000000..077f33f060b3
--- /dev/null
+++ b/ops/secrets/gerrit-secrets.age
@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> ssh-ed25519 dcsaLw Bw9waqFGuEfRZ+T4Tal4zD/qeKXmbzeHKq1DedTJawU
+9F/yABuX8Z4gv0LIJK1hFpoWEuYbVDGeH7CczxHcGO4
+-> ssh-ed25519 CpJBgQ DMfduPdf94CtostSTGvf96fSpqfkG8+3XIwq9GZyy24
+DJhILoNXS3neZT1o0PMmnidAaHJqXc58B7OzsLim4Hw
+-> ssh-ed25519 aXKGcg OWb2IzlRgzVYa2UJTsaAYc438NZ+caXze1ZjUGwnDAA
+Cm2ldnOJEJXjD7yHV179v63cdASRmog7p6a/20SkOLY
+-> ssh-ed25519 OkGqLg 9YZDxC3bXKhlMd8glsou1o906htYA2HLx2NQnL4IMnE
+v+G4u38p7fc9yZoLvT3xnnUO1qEKrVpvS86d7NlrqfQ
+-> &ra-grease Cm_tn }E 4X=NQ
+P8JOzsAd/9LKrfFmhQOUkfMVuDxNTG1fKh+6OMelYOTVx01HrG4Ef6BP0+/MFYbD
+wgaooG5RXHhtDOp7zQA
+--- 7f+r07jnglWxYdKKU7A78xcdkljUCXy77Z1MhLs6lN4
+ZTr̒jP{u\,\usނsu:`(@~Q,]T Jǵ7rk#[ֳPX'rSlij|xB^0fF@<'r?zl[p"y6vBM
+Dv|v׺Czt?ljld>:Q'VaeB'pJ)-6#gj
\ No newline at end of file
diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index 57cd6598f5dc..e1101645468d 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -22,6 +22,7 @@ in {
   "clbot-ssh.age" = default;
   "clbot.age" = default;
   "gerrit-queue.age" = default;
+  "gerrit-secrets.age" = default;
   "grafana.age" = default;
   "irccat.age" = default;
   "keycloak-db.age" = default;