about summary refs log tree commit diff
path: root/hosts/tahoe/secrets/secrets.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2022-08-06 13:50:32 -0700
committerFranck Cuny <franck@fcuny.net>2022-08-06 13:51:13 -0700
commit15a3aa6245da1dc7d0abadfa509b016d835a03dd (patch)
tree43892c76b8f73b9bdd3492af27cf01c36ff233a2 /hosts/tahoe/secrets/secrets.nix
parentfix(modules/buildkite): rename a shell script (diff)
downloadworld-15a3aa6245da1dc7d0abadfa509b016d835a03dd.tar.gz
feat(hosts/tahoe): add a token for graphql for buildkite agents
Change-Id: I17ea0baab0d74888ed1b21342c583495d3f52643
Reviewed-on: https://cl.fcuny.net/c/world/+/705
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
Diffstat (limited to '')
-rw-r--r--hosts/tahoe/secrets/secrets.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index d3571f4..390f2b6 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -22,6 +22,13 @@ in
     mode = "0440";
   };
 
+  "buildkite/graphql.age" = {
+    publicKeys = all;
+    owner = "buildkite-agent-builder-1";
+    group = "buildkite-agents";
+    mode = "0440";
+  };
+
   # the owner is gerrit, but we also want the builders to access this
   # configuration.
   "gerrit/hooks.age" = {