From 93165063cbfa4c220ac5eb2e54cb962b7b44f719 Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Sun, 29 May 2022 12:58:06 -0700 Subject: feat(buildkite): add the auth token Change-Id: I652a3326caf8f949e9734849d1492f7b9764a766 Reviewed-on: https://cl.fcuny.net/c/world/+/167 Reviewed-by: Franck Cuny --- hosts/tahoe/secrets/buildkite/agent.age | Bin 0 -> 450 bytes hosts/tahoe/secrets/secrets.nix | 7 +++++++ 2 files changed, 7 insertions(+) create mode 100644 hosts/tahoe/secrets/buildkite/agent.age (limited to 'hosts/tahoe/secrets') diff --git a/hosts/tahoe/secrets/buildkite/agent.age b/hosts/tahoe/secrets/buildkite/agent.age new file mode 100644 index 0000000..5f2f551 Binary files /dev/null and b/hosts/tahoe/secrets/buildkite/agent.age differ diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix index 01ff035..9eb8188 100644 --- a/hosts/tahoe/secrets/secrets.nix +++ b/hosts/tahoe/secrets/secrets.nix @@ -13,6 +13,13 @@ in { owner = "acme"; }; + # see https://buildkite.com/docs/agent/v3/tokens + "buildkite/agent.age" = { + publicKeys = all; + group = "buildkite-agents"; + mode = "0440"; + }; + "drone/secrets.age" = { publicKeys = all; owner = "drone"; -- cgit 1.4.1