From ef3585bb149dbf1f8a027cc03803fa2a8ef31287 Mon Sep 17 00:00:00 2001 From: Conrad Kramer Date: Thu, 19 Mar 2026 00:43:31 -0700 Subject: [PATCH] Fix agenix secret streaming for NSC configs --- Scripts/_burrow-secrets.sh | 8 ++------ secrets/forgejo/nsc-autoscaler-config.age | Bin 432 -> 1395 bytes secrets/forgejo/nsc-dispatcher-config.age | Bin 432 -> 1746 bytes secrets/forgejo/nsc-token.age | Bin 432 -> 1236 bytes 4 files changed, 2 insertions(+), 6 deletions(-) diff --git a/Scripts/_burrow-secrets.sh b/Scripts/_burrow-secrets.sh index 9ebd1f5..7754b74 100644 --- a/Scripts/_burrow-secrets.sh +++ b/Scripts/_burrow-secrets.sh @@ -117,12 +117,8 @@ burrow_encrypt_secret_from_file() { identity_path="$(burrow_agenix_identity_path "${repo_root}")" if [[ -n "${identity_path}" ]]; then - SECRET_SOURCE_FILE="${source_path}" \ - EDITOR="${repo_root}/Scripts/agenix-load-file.sh" \ - nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" -i "${identity_path}" + nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" -i "${identity_path}" < "${source_path}" else - SECRET_SOURCE_FILE="${source_path}" \ - EDITOR="${repo_root}/Scripts/agenix-load-file.sh" \ - nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" + nix --extra-experimental-features "nix-command flakes" run "${repo_root}#agenix" -- -e "${agenix_path}" < "${source_path}" fi } diff --git a/secrets/forgejo/nsc-autoscaler-config.age b/secrets/forgejo/nsc-autoscaler-config.age index 5ec06d7e98a6cb18f06e9a3f31274572922c90f3..f2acc6fa6193a08bdbca99be371a2def0099bcd7 100644 GIT binary patch delta 1348 zcmdnM{F!TlPJLOvk7;GDtGi{edqkRfN^YRGsac_Ka9LEEMT)6UwuyOpMqYujQ-HR+ z0asC&SEjSOUu0s1dsMEznM;UQd0<*#R#cFYOQ}hLn_+2sMPaUac5q~9K9{bYLUD11 zZfc5=si~o*f@e`wu4B4Fu}QMGe@;k*NvcIrKzOi6x?6T+ahZ2kL28t5WQK`>wsvKh zvwKChkz2MWSFmYexW0Z^nL$*(Q>C_>dsMi;g`2CXqq}E_f3a_pM~IhaNOEFeYKd9- z#E;_jIpslV9%dCq`rbx9W!mmO61K89X~>E%HM7CE7XiCLDp89{#K={d%E{y9eFMg=BZy1Kdwra|Ujxrv5m zM&*gQ#%YxnQ5HGn8EM)D>E(e{7G}AIL3zRTMtPo@##N=RT-NcPA>JQt(j%vENWJ1P zOI_z3f2v9%?losf*zQS1lRoh$9B3DLUHZr5pLvb$;x1XKH;Uaa50-OZMuH!&NSMgvCN@|f-~S*|QKkB) zF;8J_eP-b=c1sCO*}A;WM~aJIwf$Zft-sm-{4J+%r{DMP)(}3EWty&?@FctVwMG4b z)~Vr&c9V=>Tdj!D&3$`x;yTy04^oRfwR&ge>Q|}-os26;yf*dbzK-`#X4HN;5p2vV zw39vHTT8ZeCd0W~Pu^!3CeFVZU-)bB&&2nOem&A?J`q`8aVk<!(`!8PY$nWIqoet z zW0m+dDJUrF@7=Hd$t#k+u4$R4C41YyzT(rQwg0;1=H1&V*3oNFwO47|TfP%l?}{80 z@xSAexh17d-SkIoBFDZf=QVbkvTk8}vAX=Yd6?w3CP#&p+K(QnJmZhs_&i-a_e0dF z4GB?wjCqomLpCKit>5>$H2(cMeK)?Frv#tcbT}(KVn2Rh{r(?I1JBxoR|l@+>@u8i z-k`NUXwyZ3+?QT~p{D7Py|x=I53j$V7ts4-+n;b=rdQ{DlkY8<7x26rf$xd zs5mM6k~NQFOc(`rUzRI87V1$}!jQv|7T-3pWmQ~)Kv~N#%=Ng42 z7e4LJUpKeAb6UIJ^riZe&Hl!WH@qVEx=xP2Zz3<%d3&v`)UGQk9#Zg+a2bX{m2Y zlv9+Se`;7hS8{ntR7Q$nPPt)5fwoymaFw=4WL~y^nsb^_vAbt#WSDnGVt!arQIt>M z#E;_jzD_3Qg_dDH;qEyB>0yb9krghkAxKxrTuUBqtqr!kHd}uOQ@>0b XPw!=&!^Nt;i$y0YyFX(2k<0)9vdVwO diff --git a/secrets/forgejo/nsc-dispatcher-config.age b/secrets/forgejo/nsc-dispatcher-config.age index cd957f985c2aa89fbedf9f44c2cf352d275c3648..a71da73a34bcec2ac97fa742a9a97f991f97f1d9 100644 GIT binary patch delta 1702 zcmdnMe2I60PJKYOqh+OESfq=$c41gjuxXZaag=LFPJy#muyKe}d7?*{yLX0TQczZv zCs%2bVWg{fP;q{tfkB{tvVUoKW_pohNPufmq;Y;)zDGfNwx?H=d1;uj1(&X!LUD11 zZfc5=si~o*f@e`wu4B4_VPa*vMQ&bJsz*VxPgZJFid#WYgmIyEVUkyhSA}ayW?6u# ze|C~dnPpHimx))oV`)T2xrdL3ahS1bu77DofOkq_ntN4BkdeP zkru%Q6?w&O?&Xy^xmn(>?%L(r;YOi85!r60$u1s6`Yu8GIr-UKy1Kdwnf_kB>HcO# zsUhA*Sye`<&QXOUTod%>o|_mTwApR@&1F3c zzB^dDpZdeZ^kw}6J)ZBqiHUb#-uiVou+fIme4^k3EAw4#?W|9pEOFi~d2-XAPnTGA z+uP6EFq)bPH#${z^-s-{TUwTSaQRZp@EytDZt19Mo#9n{&2N`EA!NGt)I)C%O3Cbf zu=n4p>gf8Fu?6;p8yYQO=Z?=DTMHR$DL~)^qsG-S~DD^T~>yE9dG?*t)$l zc{Xjys)>hu)}7YE*CLnRGJN)T`p>e5Kb%vv)^M$vD4JN{`I+xz zR?*!VH(VDjQ@){d-tq@WO3qz&PwA$6`UT7H8eJ8iB%G99EM31?x9d`EBh&2#MV+f` zHz+Eud-Gh&(8|W+KPOwwp7rfF?(ylXZojnakz-eWhPm#8D-)K_Khfo!%DN`3zdxk) zx9j=+ElG#VCQO_4dB)vceICIJCd9Uful~9D<;Jb|@>g8&^`B5bzi6@T#y<;gOne~z zYU(NW1Dc<;Ckk<_PMdU6U`_pbzxO7>ev{m`cO8h5Qq(-=TVk}iNWNqDt)z%KvP^zP zli~_>JeAhilt;Sm_}(e})q~Odh5VJX3nTOU51uZJZ<*?TBG@{OBW-n3PE6P9l$n1m zT~GG@mz3AnS1WtZ$av^~z}?)nQsIxz);|C8CG~*$4sIRMh54mFFO_p1x$<#E{SB6F zA3FcsYtLD5PEj#9axzQKioo084mj=gPO#y7*6ywE=A~Cxc$^J*SUORw?r78fGMo2YxyKG^ z#av5p69`+OS^Y61TUxVg=AS^m3g1FMYo+=b=0Y_&{-MXOCf?Y*T{riPtDxg&_cdEY zxzsBd4ykQgaI9Fu^5LO;w^hmuCOwF=UmFr%C|JU%4CJAvi>-zf(LB$~?H=e66u z)4wIO#D(Fdl6|v4bz`FCKI<*_o4S5KU;3dyJ?7V+)@b3&W)C=pI)0}eywZEG-oS}n z;`)~L^=n>NE3WO}^cE7Z*;F*UX3mM**SX8sgm`Zr(PkDGSa*8<*Kd1bAE;C}-k2uN zZgfNG+rbXCIsBPfb0jYI8|+*!IN@MP&Gm*3W9#{M&PMNlm%2~<=)9}1HW|%3Yk5&U z)$@kRp6Z-GG zZ0nY+FqSnJzg)XJ#X&WrU1yfBS=AwV?dy+IBU}~My^RyUF+*Zr0wCRudQg`*4>3_ZekkY58({3jIvd zoEh=MCjI)UL$b#g`Rw>38y226FP=9idzsR~Pai8MPB9i&T2wasw)b^E zlmGkIJMBL?`A3&)ue$2~ojKoT<>>y?sa3DBYj2obv}L8?oS&XX-;H{>`Re1$m$1yt zo#=g}*0=ARd&!NMM+w0^|Mj=z9$)@C#>lsR`|l+61&>Y?YRpyHc0Afze)`At$JV`a zcqU>dJ^j!9Y1&(zR@-G>+?tqUmdbFKv!+8KO8DC6=&h^EHtL*7UV3PjY*aaG^5#~F z-Z@(@@+pPcUXr@I%%FXVMd7_IFR#3o4}HouSN21hpv0|gH=`&+(W~d|EI!Tsu~AIc zw)kFc@1buIRdd^0#C}GwFlt=yNVl`enf9yJ+LGH;TcLJwc5X&!vTvrjYkF>~MP)%+re$DZzN>LWF_*5LLUD11 zZfc5=si~o*f@e`wu4B4_bBIN0ZcvVAxq)d?afq=`o|{Q%k#<(3qnl@bl1r3JK&HN{ zX^>fRu}M}km#ME;N^(S5phZ@2WrT5vlSipRWVxwFUYfIaXpwhjgsXdCc8*6>c}`;S z#E;_j&MrlkW@d%qm5F6WUL`@M;pLg3KB0+bDMnryVa|!!WkEqX*@@+;?#{kk-dPrv zCV}Nu5e23Co<@aL+L2Wi#>qMQe#HUCJ|-q%1x0?vu9YDsUJ>P7y1KdwVda(v#@QhO zX2uoH`57+xCHfxTW;srYRTgDI;m+Rvl|?C<9#O6Zxk;4bv^`1l9UZWuEd93_rzEaIzKvPp^U= diff --git a/secrets/forgejo/nsc-token.age b/secrets/forgejo/nsc-token.age index ced6518e6b98d7cdf565c706dec733cdb88823af..68ace3ed46a52bfcf92df311d394a5b5534dd741 100644 GIT binary patch delta 1187 zcmdnMe1&s@PQ6ola7lopiDjfyVv)CFR77QkrG7=4S5ahvL1en0sgIGin^{1JsaI}9 zF_(wATScNrntQfmRD_d{kx^!NNTq3xsaaJ@ka?PUM5MljrE9X2zE7sJE0?aFLUD11 zZfc5=si~o*f@e`wu4B4_n@MPKrg3_9gmYO{c%-3!l53?$PFjS!yGd4XPN9phdthLG zrCCIzrAw|SmqnIyL_tuIe|Uaro_kT4iHm7rd8JE9sc%k2QE_RGPfm7PzE^&tt8dlB z4-)mJVdkzGMVX#nrcRaN{=td9CdpC0jy}HbCKe_o-mb~!+Acm(?tWgmj*eW(q2B)a zQH3elK}Dek=4GZC1#TwV-X^Ar1wn@T1yPl5CSLhr9-b*VjwW2Xy1EM99;L=E6={hc zk(mJoK>^Oik%l1_rG@bCw{-D^rl{$ z^Za>}m2yA2kLvyV*3`eQDI+g_l@pgumz>BqDG|2o?G}DVVk}QhOPJ$mvfw`7s-!I$ z{C;z;oqMHiekkJOA=~v+kI5=dbg$T^D8g~%#`oO4cF#Qv0-imzso8rVFesk;r0JpK z9GL-o>fZ&srT;l}WR~edZ_nEY7}!o#PqUt5FMKm_>b+y^t3pb59`@aM$v@QHYWw%c zJrc}a`~Do3NIQ7on~soPmVI)oT-MTgj|18T@_(_Pxo}k>>~p{O?tia@4;qHC^&ZlD zShK=msnmDAU()|;s~!a(em>8_q&eIsL$hl0yJa)mPfnUxpX_b(SAPE_ueM_`pLhQi zX?njR`g7*ae`gu5J<3?jtL%GrZrGj+t%Y$%-soHKJXyHzu#oZJ)7F;3Ifs8SE$tHs zP+iuxJC(s8dLW;kDW@W@^;fRq^_s^}u+WS9R*8^B^?R44Y_YecWX}BBa=Ll@A${NYC-L=03mMsN zUhK2HzGJoI$=HM=d9OS;o3h>SCzRe*VLS05{g}j@=M91{Gj7fA-m_)p#fr<1Y_6<( z(kx~&y&)~<=#8+|K8ZhW9JSM`U|Cr5<$;LE$=ZMq+FEjIlVrS2%Z@LQso47FenW_u zL3;4pVvk+bRqOQ>%a*qGytr2{E8&!Ot$r)pBe~+3#piS57w_Z#%D?wz>6fs$6`blD zPKA8q32afn{rjcu(#7}7*rE^4Z&o#NLfK;S&C_Txm!k}mton& z4-)lWrpZY`mQDq^6$O?qPE{_IWr1Ni`iA9}8Qw|Wr9rMqndKqDt|9(jx#e6*hNUL% zp zWnu2&P8LX>c`oT$$z=xVMg^LoCZ-13j#2qsb6TVqyqHS!VA`J W*$nOQKEc}49JLB_o?FLv&IbTM%YK9a