about summary refs log tree commit diff
path: root/hosts/tahoe
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2022-05-29 12:58:06 -0700
committerFranck Cuny <franck@fcuny.net>2022-05-30 13:37:14 -0700
commit93165063cbfa4c220ac5eb2e54cb962b7b44f719 (patch)
tree7e0db73e2a1a3edd7854a6b3b56e7a9dca1f405f /hosts/tahoe
parentfix(home/zsh): don't start tmux when in an ssh session (diff)
downloadworld-93165063cbfa4c220ac5eb2e54cb962b7b44f719.tar.gz
feat(buildkite): add the auth token
Change-Id: I652a3326caf8f949e9734849d1492f7b9764a766
Reviewed-on: https://cl.fcuny.net/c/world/+/167
Reviewed-by: Franck Cuny <franck@fcuny.net>
Diffstat (limited to '')
-rw-r--r--hosts/tahoe/secrets/buildkite/agent.agebin0 -> 450 bytes
-rw-r--r--hosts/tahoe/secrets/secrets.nix7
2 files changed, 7 insertions, 0 deletions
diff --git a/hosts/tahoe/secrets/buildkite/agent.age b/hosts/tahoe/secrets/buildkite/agent.age
new file mode 100644
index 0000000..5f2f551
--- /dev/null
+++ b/hosts/tahoe/secrets/buildkite/agent.age
Binary files differdiff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index 01ff035..9eb8188 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -13,6 +13,13 @@ in {
     owner = "acme";
   };
 
+  # see https://buildkite.com/docs/agent/v3/tokens
+  "buildkite/agent.age" = {
+    publicKeys = all;
+    group = "buildkite-agents";
+    mode = "0440";
+  };
+
   "drone/secrets.age" = {
     publicKeys = all;
     owner = "drone";