home/nixos-servers
home/nixos-servers
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

Encrypt k8s secrets with Forgejo action key
Some checks failed
/ blog-pim (push) Failing after 1m46s
Details

Browse source 
Allow mounting all volumes in Forgejo actions
This commit is contained in:
Pim Kunis 2024-05-01 23:38:45 +02:00
parent 4b6a072a5c
commit a7d403eb5b
2 changed files with 15 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
kubenix-modules/forgejo/runner-config.nix
View file

@ -27,7 +27,7 @@
privileged = false; privileged = false;
options = ""; options = "";
workdir_parent = ""; workdir_parent = "";
valid_volumes = [ "/var/run/secrets/kubernetes.io/serviceaccount" ]; valid_volumes = [ "**" ];
docker_host = ""; docker_host = "";
force_pull = false; force_pull = false;
}; };

19
secrets/sops.yaml
View file

@ -29,11 +29,20 @@ sops:
- recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw - recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsM0xTM1pFNDMwYW1FSDRB YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZ3JkeG5KMkI3THREM2Qy
SGk3dXl6RzVPVXF5N2NYSWxYVXpTYm1UUUZNCkkwOEJZbnVTanRRSXFWWXpJQ0lK UithR0hPQ1pXU003S1ozaGlJUXVmM1hBdVdJCmZYZ3cveFJkNkEzUTZvOWNIS2Rk
T0Z6QnMyZUl1WGEwaEsrbitUUFNoa2MKLS0tIHArQkIrRWlWcU9yUFVaa3pJMDlo b1hNdjd0eVA3SlEyZnBObS9lWnMyOVEKLS0tIFJuL1k2UmJxakU2Q0JnNHc2Tkdn
dVBPbkRib1M1cmVKZzl4TWpoSml2WDQK45jJDXpPXIBoaANhjZSWYVZ8mI51LAin T2hCN1VrVjFBaW5XNlVoNnA4QUE5VUEKL4ieqdtq0oDPmPYvQJUZFjeE9XPo4+o+
EqgBj7VKY+CQbw1gMd1Fdh8iDYraowwcLyd/ZhZ/M0kIdkCc5E1a5g== dsalIMaKZTeUK7xPixF4ZNxhxJwDMx21WjdinOJFaFzJOOfXlAQnxw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1x7wv7s2z2cxcvys223rzkzrx33l85rg6jy4klr07atf5r3d8yp3qrwg4lx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwcU1kSFZUWEthMEVYbXBZ
TUtHdEhpdkRJaUtoaTdxQnRqTXVWdkNuM2s0CjVwNWoyNmdWL1kwcDFhVElBMElN
c2dUMWFYeTVaNzBmZGJ3NzNrWXJuaHMKLS0tIFo0Qlg3RkYydURrOXRrdzZXeFlQ
Z2w4d09qV29XSWNNZW9Od2taNm9Td0kKdWFS8lA4mS85XWbaf4WqRzakHVJ/AMXl
zK7C4DRLLOrLtPilmH5rpu2luC8BE0enxX8ZqF8GJt+Uo3sPfBlpEg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-05-01T21:17:22Z" lastmodified: "2024-05-01T21:17:22Z"
mac: ENC[AES256_GCM,data:Z854yGCEukya2IxAiNp/vmOpf+MqY6Pfvk2uhhH6UPoijvt7gU/AacmieKXNc+lErqh9mxwBoEoY/SwTYymqEsjm3vAWn9mrgvs6dfaTYuyFPg0ZrnV2pT5GiCLbmPhBKw/Fx53MLmB2CcYvYtJkoZk0+pSBOKpI+Mzr1tUOn98=,iv:3wZVY4KjXriFcpCAzjRZsVo/X7gi6WLVRzalKcA41Nk=,tag:evss+EvaaMpj3LyJCNOTZw==,type:str] mac: ENC[AES256_GCM,data:Z854yGCEukya2IxAiNp/vmOpf+MqY6Pfvk2uhhH6UPoijvt7gU/AacmieKXNc+lErqh9mxwBoEoY/SwTYymqEsjm3vAWn9mrgvs6dfaTYuyFPg0ZrnV2pT5GiCLbmPhBKw/Fx53MLmB2CcYvYtJkoZk0+pSBOKpI+Mzr1tUOn98=,iv:3wZVY4KjXriFcpCAzjRZsVo/X7gi6WLVRzalKcA41Nk=,tag:evss+EvaaMpj3LyJCNOTZw==,type:str]