From a260eba3cf478c99dcfd92b821934b40ed905894 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Mon, 23 Dec 2019 13:26:09 +0100
Subject: refactor(ops/kms_pass): Pin encrypted secrets into Nix store

---
 ops/kms_pass.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'ops')

diff --git a/ops/kms_pass.nix b/ops/kms_pass.nix
index 14989b392dd1..b8a97d1332f8 100644
--- a/ops/kms_pass.nix
+++ b/ops/kms_pass.nix
@@ -14,6 +14,7 @@ in (writeShellScriptBin "pass" ''
 
   CMD="$1"
   readonly SECRET=$2
+  readonly SECRETS_DIR=${./secrets}
   readonly SECRET_PATH="$SECRETS_DIR/$SECRET"
 
   function secret_check {
-- 
cgit 1.4.1