From 15a3aa6245da1dc7d0abadfa509b016d835a03dd Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sat, 6 Aug 2022 13:50:32 -0700
Subject: feat(hosts/tahoe): add a token for graphql for buildkite agents

Change-Id: I17ea0baab0d74888ed1b21342c583495d3f52643
Reviewed-on: https://cl.fcuny.net/c/world/+/705
Tested-by: CI
Reviewed-by: Franck Cuny <franck@fcuny.net>
---
 hosts/tahoe/secrets/secrets.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'hosts/tahoe/secrets/secrets.nix')

diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index d3571f4..390f2b6 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -22,6 +22,13 @@ in
     mode = "0440";
   };
 
+  "buildkite/graphql.age" = {
+    publicKeys = all;
+    owner = "buildkite-agent-builder-1";
+    group = "buildkite-agents";
+    mode = "0440";
+  };
+
   # the owner is gerrit, but we also want the builders to access this
   # configuration.
   "gerrit/hooks.age" = {
-- 
cgit 1.4.1