about summary refs log tree commit diff
path: root/secrets (unfollow)
AgeCommit message (Collapse)AuthorFilesLines
2019-09-22 r/87 chore(tazblog): Remove more unneeded dependenciesVincent Ambo1-4/+4
2019-09-21 r/86 chore(k8s): Bump deployed Nixery versionVincent Ambo1-1/+1
2019-09-21 r/85 chore: Bump Nix channel to a more recent versionVincent Ambo1-2/+2
This version has Nixery popularity data available.
2019-09-21 r/84 chore(third_party): Bump Nixery versionVincent Ambo1-2/+2
2019-09-21 r/83 refactor(k8s): Parameterise the nginx versionVincent Ambo2-1/+3
2019-09-04 r/82 fix(k8s): Reinsert passLookup newline after kontemplate trims itVincent Ambo2-1/+2
SSH can not read the key without the trailing newline. Ideally kontemplate would expose a toggle for this.
2019-09-04 chore: Update kontemplate to v1.8.0Vincent Ambo1-4/+13
This version is agnostic of the working directory even if insertFile/insertTemplate are used, which makes it a lot nicer to work with in this repository structure.
2019-09-04 fix(k8s): Move nixery-secrets to the correct namespaceVincent Ambo1-6/+5
2019-09-03 feat(k8s): Insert Nixery's secrets via kontemplateVincent Ambo5-4/+25
Instead of having a manually prepared secret, use Cloud KMS (as per the previous commits) to decrypt the in-repo secrets and template them into the Secret resource in Kubernetes. Not all of the values are actually secret, it has thus become a bit easier to edit the known hosts, SSH config and such now.
2019-09-03 feat(secrets): Check in secrets required by NixeryVincent Ambo3-0/+0
2019-09-03 feat(tools): Introduce pass-compatible wrapper using Cloud KMSVincent Ambo5-0/+78
Adds a shell script that supports a subset of the 'pass' interface for compatibility with kontemplate, and wraps kontemplate in a script that places this version on the PATH. This makes it possible to use Cloud KMS encrypted secrets with kontemplate.
2019-09-03 feat(gcp): Create Cloud KMS resources for encrypting secretsVincent Ambo1-8/+28
The idea here is to use Cloud KMS and a shell script that mimics 'pass' to trick kontemplate into using Cloud KMS to decrypt secrets.
2019-09-03 chore(gcp): Remove monorepo repositoryVincent Ambo1-5/+0
The repository is now public on Github.
2019-09-03 fix(tazblog): Explicitly allow substitutes for the blogVincent Ambo1-6/+10
Not entirely sure which part of the setup set this to 'false', but this is potentially the key for why tazblog ends up being rebuilt all the time.
2019-09-03 r/78 chore(k8s): Update deployed Nixery versionVincent Ambo1-1/+1
2019-09-03 r/77 chore(third_party): Bump Nixery versionVincent Ambo1-3/+3
2019-09-02 chore(tazblog): Clean up unneeded filesVincent Ambo5-76/+0
2019-09-02 chore(gemma): Delete old image build configurationVincent Ambo1-19/+0
2019-09-02 chore: Pin Nix version in Travis buildsVincent Ambo1-0/+1
There are some unexpected cache misses in the Travis builds and I suspect this might be due to mismatching Nix versions.
2019-09-02 r/75 fix(k8s): Add nginx route for load-balancer health checksVincent Ambo3-3/+11
2019-09-02 r/74 chore(third_party): Remove git-appraiseVincent Ambo43-7327/+0
Not actually in use here ...
2019-09-02