From 8fde995dff672a4ddb9ec399c47a0c8dece1a216 Mon Sep 17 00:00:00 2001
From: Jean-Paul Calderone <exarkun@twistedmatrix.com>
Date: Wed, 30 Jun 2021 16:10:23 -0400
Subject: [PATCH] Configure the testing grid with a deploy key
---
morph/grid/testing/grid.nix | 11 +++++++++++
morph/grid/testing/public-keys/deploy_key.pub | 1 +
2 files changed, 12 insertions(+)
create mode 100644 morph/grid/testing/public-keys/deploy_key.pub
diff --git a/morph/grid/testing/grid.nix b/morph/grid/testing/grid.nix
index 0cdfe5ae..17fc81ee 100644
--- a/morph/grid/testing/grid.nix
+++ b/morph/grid/testing/grid.nix
@@ -13,6 +13,14 @@ let
privateKeyPath = toString ./. + "/${rawConfig.privateKeyPath}";
};
+ # Configure deployment management authorization for all systems in the grid.
+ deployment = {
+ services.private-storage.deployment = {
+ authorizedKey = builtins.readFile "${config.publicKeyPath}/deploy_key.pub";
+ gridName = "testing";
+ };
+ };
+
payments = {
imports = [
gridlib.issuer
@@ -20,6 +28,7 @@ let
(gridlib.customize-issuer (config // {
monitoringvpnIPv4 = "172.23.23.11";
}))
+ deployment
];
};
@@ -31,6 +40,7 @@ let
monitoringvpnIPv4 = "172.23.23.12";
stateVersion = "19.03";
}))
+ deployment
];
};
@@ -44,6 +54,7 @@ let
monitoringvpnIPv4 = "172.23.23.1";
stateVersion = "19.09";
})
+ deployment
];
};
diff --git a/morph/grid/testing/public-keys/deploy_key.pub b/morph/grid/testing/public-keys/deploy_key.pub
new file mode 100644
index 00000000..2dafd3cc
--- /dev/null
+++ b/morph/grid/testing/public-keys/deploy_key.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB88qfLdoR5Pq9Us7vOVc6wBWmIDxme9MXYQSxxO+8/X exarkun@baryon
--
GitLab